Overview

overview

10

Static

static

VirtualBox...on.exe

windows7-x64

1

VirtualBox...on.exe

windows10-2004-x64

10

Resubmissions

23-01-2023 13:41

230123-qzjg9add79 10

27-12-2022 17:22

221227-vxl8ksfd97 10

27-12-2022 17:10

221227-vprhbsae8t 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VirtualBox_7.0-Download_Old_Builds_-_About_-_Documentation.zip

  • Size

    45.8MB

  • Sample

    221227-vprhbsae8t

  • MD5

    af64b7e90c6ab6ab41d30f3560493a5f

  • SHA1

    28395db17798078b1db06514c4ef2a089c3988ef

  • SHA256

    e198a1cf6988b3e8bffa5dec0b28c891c5ef4116c71fbc94d9a68ed9e9b444eb

  • SHA512

    36bc1b46b5dfe174ba742538425261bd2389e535b7e95a8d9def9ef7a6899c70dbec7043775e3f18d05c96988042863c40b95c0acf682a3a4474263430b9dc48

  • SSDEEP

    786432:cFcvFCL49PhTxLca5qMIgaNC8yXFV8QWVbQWV8QkVOQOVwQPVZQl6tFX2NGWN6nh:cFcvFj9DLP5q1rN1QCQRQDQNQ7Ql6tFr

Score
10/10
rhadamanthyscollectiondiscoveryspywarestealer

Malware Config

Targets

    • Target

      VirtualBox 7.0-Download_Old_Builds - About - Documentation.exe

    • Size

      727.0MB

    • MD5

      8d10972d8f4c00b6811783823e2e3ec6

    • SHA1

      f6c86e26b6e55c71a02ee932bb0bae7200feaae1

    • SHA256

      ab378c4f2a52e1c4a5e199917e37a4d58a4f2c0d7585bb6f68f353d4018aba8c

    • SHA512

      27636191bd6c1da31cf0fee717c6fd612b2b5aa8b65e9ffa85566852abc6e12860b89baf3e50aeb6b2138a220d3bc737e6fa53b16983de3d04df5a9c239bfb97

    • SSDEEP

      12288:JgWkSNSTtX+5kOzIGgn/5HY5o8e3Fu3R+ZysWra9PtdBtSt6x4fOddti1ySgJly8:fkSy+510TnDPPvit6x4wi1ySgJlWVO

    Score
    10/10
    rhadamanthyscollectiondiscoveryspywarestealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks