General
-
Target
9d4b9301db2e3d938b3a69537667da8376542d56a6762b9c909820a453010c52
-
Size
344KB
-
Sample
230206-19ebdsbd6y
-
MD5
9ba267d6d2dda69275aa11857e61092b
-
SHA1
1ebe4ff49b2667ec0fbcc9cb0d76eba2240dbdfa
-
SHA256
9d4b9301db2e3d938b3a69537667da8376542d56a6762b9c909820a453010c52
-
SHA512
3c34c189286e4fd5f1a2f95b06bf5a45874a4ae7e71165144f4aeb365f221643235d1e7ea1714771eb44c9967ae56c8e74875250a46cbc9db0a7d8b631365b65
-
SSDEEP
6144:CL/GtLlBW1KEV1Dah9UMs1EUTDuQj9F0aah:CrwxI8XUXWiDljUa
Static task
static1
Behavioral task
behavioral1
Sample
9d4b9301db2e3d938b3a69537667da8376542d56a6762b9c909820a453010c52.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
9d4b9301db2e3d938b3a69537667da8376542d56a6762b9c909820a453010c52
-
Size
344KB
-
MD5
9ba267d6d2dda69275aa11857e61092b
-
SHA1
1ebe4ff49b2667ec0fbcc9cb0d76eba2240dbdfa
-
SHA256
9d4b9301db2e3d938b3a69537667da8376542d56a6762b9c909820a453010c52
-
SHA512
3c34c189286e4fd5f1a2f95b06bf5a45874a4ae7e71165144f4aeb365f221643235d1e7ea1714771eb44c9967ae56c8e74875250a46cbc9db0a7d8b631365b65
-
SSDEEP
6144:CL/GtLlBW1KEV1Dah9UMs1EUTDuQj9F0aah:CrwxI8XUXWiDljUa
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Blocklisted process makes network request
-
Loads dropped DLL
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-