General

  • Target

    42e0c2b53ad77355e1a8a7c9d3cab5e4a77bff5250ae4736e23e0801813b2bda

  • Size

    300KB

  • Sample

    221221-n736hscc29

  • MD5

    bee69d74c58afca034c6891aeec34925

  • SHA1

    4c71bbd11ad13ec59715adfc5d9ccd0cdbd9d800

  • SHA256

    42e0c2b53ad77355e1a8a7c9d3cab5e4a77bff5250ae4736e23e0801813b2bda

  • SHA512

    7efffca1abd1c9a0c11f1a9e903fa490c716d9e6a1884640ec5876ced2407f144a9b2bfbd471212fcd45f2abbf9656855212ff76f59e0e2e1e87d7d0ced9f7d8

  • SSDEEP

    6144:6R5LyW6dIVTPNXtYAsl4/kn4pBWW85cAu65eRu4:Q5mWzxtslqDNFV8

Score
10/10

Malware Config

Targets

    • Target

      42e0c2b53ad77355e1a8a7c9d3cab5e4a77bff5250ae4736e23e0801813b2bda

    • Size

      300KB

    • MD5

      bee69d74c58afca034c6891aeec34925

    • SHA1

      4c71bbd11ad13ec59715adfc5d9ccd0cdbd9d800

    • SHA256

      42e0c2b53ad77355e1a8a7c9d3cab5e4a77bff5250ae4736e23e0801813b2bda

    • SHA512

      7efffca1abd1c9a0c11f1a9e903fa490c716d9e6a1884640ec5876ced2407f144a9b2bfbd471212fcd45f2abbf9656855212ff76f59e0e2e1e87d7d0ced9f7d8

    • SSDEEP

      6144:6R5LyW6dIVTPNXtYAsl4/kn4pBWW85cAu65eRu4:Q5mWzxtslqDNFV8

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks