General

  • Target

    e4572b86c169b65b0e3d046efd83c91f96dbb7baddad8a32f842d4ad40de5460

  • Size

    292KB

  • Sample

    221221-jcvhnseh7y

  • MD5

    20735b778ed03f5c0674578cecb26f54

  • SHA1

    9d6be2af90756e7c78e75fb373fadfbf23a80e8a

  • SHA256

    e4572b86c169b65b0e3d046efd83c91f96dbb7baddad8a32f842d4ad40de5460

  • SHA512

    458a050eb4c4e14c4954ccc505eb76269516c13a1029d45d932cdfb3a6651fe0aa85fb67a24052ef2aaad6a4137a86d5ebbca3732e3f493017be0c9bd484f051

  • SSDEEP

    6144:g1LAjR0NOIw+K9bcuCGItlIT3SenRWzgxrRhCa:g1ctL7bcJrDIOeniux

Score
10/10

Malware Config

Targets

    • Target

      e4572b86c169b65b0e3d046efd83c91f96dbb7baddad8a32f842d4ad40de5460

    • Size

      292KB

    • MD5

      20735b778ed03f5c0674578cecb26f54

    • SHA1

      9d6be2af90756e7c78e75fb373fadfbf23a80e8a

    • SHA256

      e4572b86c169b65b0e3d046efd83c91f96dbb7baddad8a32f842d4ad40de5460

    • SHA512

      458a050eb4c4e14c4954ccc505eb76269516c13a1029d45d932cdfb3a6651fe0aa85fb67a24052ef2aaad6a4137a86d5ebbca3732e3f493017be0c9bd484f051

    • SSDEEP

      6144:g1LAjR0NOIw+K9bcuCGItlIT3SenRWzgxrRhCa:g1ctL7bcJrDIOeniux

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks