Overview

overview

10

Static

static

1

dbc0e385e8...6f.exe

windows10-2004-x64

10

Resubmissions

15/02/2023, 07:25

230215-h8859sac81 10

15/02/2023, 03:20

230215-dvt2zahd7x 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dbc0e385e8094cc50b04bd729d8dfa062a7140102a9018da8da058a52424d36f

  • Size

    237KB

  • Sample

    230215-h8859sac81

  • MD5

    3aab2a2b5f59d1e69011f7aa9f3cc683

  • SHA1

    7623d75b1ef83f847bc30ac8ffd2276706ae41ba

  • SHA256

    dbc0e385e8094cc50b04bd729d8dfa062a7140102a9018da8da058a52424d36f

  • SHA512

    e440a6a662b9905589e43adbc4623686281778c85c90cba1b095fa2ad5c412e93c9db471b0b6df31a4fcc9dab977fccd073796943fe65f541d03cd37c0ca4e78

  • SSDEEP

    6144:hDLK+zbRolUrQcmPbgGntAGwrhVeCubp:5u+y20cTcK1Nul

Score
10/10
rhadamanthyscollectiondiscoveryspywarestealer

Malware Config

Targets

    • Target

      dbc0e385e8094cc50b04bd729d8dfa062a7140102a9018da8da058a52424d36f

    • Size

      237KB

    • MD5

      3aab2a2b5f59d1e69011f7aa9f3cc683

    • SHA1

      7623d75b1ef83f847bc30ac8ffd2276706ae41ba

    • SHA256

      dbc0e385e8094cc50b04bd729d8dfa062a7140102a9018da8da058a52424d36f

    • SHA512

      e440a6a662b9905589e43adbc4623686281778c85c90cba1b095fa2ad5c412e93c9db471b0b6df31a4fcc9dab977fccd073796943fe65f541d03cd37c0ca4e78

    • SSDEEP

      6144:hDLK+zbRolUrQcmPbgGntAGwrhVeCubp:5u+y20cTcK1Nul

    Score
    10/10
    rhadamanthyscollectiondiscoveryspywarestealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks