General

  • Target

    f57bb4bd38f82867a733733f56b4928d1a238052c57e4d79e4ae8820fa8bc025

  • Size

    286KB

  • Sample

    221218-wrrfsadb67

  • MD5

    b7f39a03393393e9d4a6ba834c8c5c34

  • SHA1

    dba7d9963fdc02cb5a2baf94fa51219c8ff9ea7a

  • SHA256

    f57bb4bd38f82867a733733f56b4928d1a238052c57e4d79e4ae8820fa8bc025

  • SHA512

    f5b700c81c101e5235d677ea6850de07da999c22df18abe33e35d9667ffed7d0f778d21da92d916e7cd247ea5e2b7f70ac8581e8a2e80e371dbddce1f789d201

  • SSDEEP

    6144:ibvL3wnq0oBMih1i9tHL8AtDT2Uxjpw9l390mBOgmjcbXF:ibv7wnq0zihmRLbGUrA0mYgmYbXF

Score
10/10

Malware Config

Targets

    • Target

      f57bb4bd38f82867a733733f56b4928d1a238052c57e4d79e4ae8820fa8bc025

    • Size

      286KB

    • MD5

      b7f39a03393393e9d4a6ba834c8c5c34

    • SHA1

      dba7d9963fdc02cb5a2baf94fa51219c8ff9ea7a

    • SHA256

      f57bb4bd38f82867a733733f56b4928d1a238052c57e4d79e4ae8820fa8bc025

    • SHA512

      f5b700c81c101e5235d677ea6850de07da999c22df18abe33e35d9667ffed7d0f778d21da92d916e7cd247ea5e2b7f70ac8581e8a2e80e371dbddce1f789d201

    • SSDEEP

      6144:ibvL3wnq0oBMih1i9tHL8AtDT2Uxjpw9l390mBOgmjcbXF:ibv7wnq0zihmRLbGUrA0mYgmYbXF

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks