Overview

overview

10

Static

static

1

506405f75f...3e.exe

windows7-x64

10

506405f75f...3e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    506405f75f30b61908c652ac3b6f063e.exe

  • Size

    294KB

  • Sample

    230306-l2tc1sbf55

  • MD5

    506405f75f30b61908c652ac3b6f063e

  • SHA1

    993f3672177a802bef64e776de4447bf886a9b50

  • SHA256

    4fc39495038014b3e49eb088c92c9310487beca6a027ebc72d60607a05b4f331

  • SHA512

    ce5d7d93864decb5e70e028f455fec063cea530511efebe0889b5f7cd8dd482b937e4073c969c74a5d597ce5d226aea7c322d8cc343b06e7b818fd10a9bfce76

  • SSDEEP

    6144:xxjWfp6vyNK1FaJvHqoRKOiT2XP2Xs7W/uG2cGxp2Qyotm:xxjWfp6vySFnOY2XPw/RGKQyom

Score
10/10
rhadamanthyscollectionstealer

Malware Config

Targets

    • Target

      506405f75f30b61908c652ac3b6f063e.exe

    • Size

      294KB

    • MD5

      506405f75f30b61908c652ac3b6f063e

    • SHA1

      993f3672177a802bef64e776de4447bf886a9b50

    • SHA256

      4fc39495038014b3e49eb088c92c9310487beca6a027ebc72d60607a05b4f331

    • SHA512

      ce5d7d93864decb5e70e028f455fec063cea530511efebe0889b5f7cd8dd482b937e4073c969c74a5d597ce5d226aea7c322d8cc343b06e7b818fd10a9bfce76

    • SSDEEP

      6144:xxjWfp6vyNK1FaJvHqoRKOiT2XP2Xs7W/uG2cGxp2Qyotm:xxjWfp6vySFnOY2XPw/RGKQyom

    Score
    10/10
    rhadamanthyscollectionstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks