Overview

overview

10

Static

static

1

f8c0451352...e4.exe

windows7-x64

10

f8c0451352...e4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f8c0451352782c2b6efd3fd5a6d6528ab4009b4b3c46e8064c6079be792667e4.exe

  • Size

    251KB

  • Sample

    230213-tl758sdg5z

  • MD5

    9a2b9262e1450701cfdf957b4051f162

  • SHA1

    4adeadc106d1405268998b9069700aacf098823f

  • SHA256

    f8c0451352782c2b6efd3fd5a6d6528ab4009b4b3c46e8064c6079be792667e4

  • SHA512

    8b11d5760cf6c23fdc257a7e0e89e8bcce6b7bb693be41b9ca251ec4871944e2cef69864a674975cbadbd2901dc211e495970e49b422856206b34e7cda718250

  • SSDEEP

    6144:lhi7B5LlFlUWndGzPkLVgs1MzhDi8W7y5:lhi7B5JFrUzPkBPcE

Score
10/10
rhadamanthyscollectiondiscoveryspywarestealer

Malware Config

Targets

    • Target

      f8c0451352782c2b6efd3fd5a6d6528ab4009b4b3c46e8064c6079be792667e4.exe

    • Size

      251KB

    • MD5

      9a2b9262e1450701cfdf957b4051f162

    • SHA1

      4adeadc106d1405268998b9069700aacf098823f

    • SHA256

      f8c0451352782c2b6efd3fd5a6d6528ab4009b4b3c46e8064c6079be792667e4

    • SHA512

      8b11d5760cf6c23fdc257a7e0e89e8bcce6b7bb693be41b9ca251ec4871944e2cef69864a674975cbadbd2901dc211e495970e49b422856206b34e7cda718250

    • SSDEEP

      6144:lhi7B5LlFlUWndGzPkLVgs1MzhDi8W7y5:lhi7B5JFrUzPkBPcE

    Score
    10/10
    rhadamanthyscollectiondiscoveryspywarestealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks