Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    022bbd9bb6b00684b58b0e52634eabca829f2c7ed9a91a20f7cf8fb3c54ab36b

  • Size

    326KB

  • Sample

    230307-f2te5agd5s

  • MD5

    1c7e1a1bb9aa49735c85cf33bdfd82b2

  • SHA1

    33947723dc869c5caad9bdd24f0b638edb050d56

  • SHA256

    022bbd9bb6b00684b58b0e52634eabca829f2c7ed9a91a20f7cf8fb3c54ab36b

  • SHA512

    97ec6c863a9d127e2ceb59185a2d12893f609b1ee5e2ec5d32561f13bc304c5a003a649e704003ae2da039579317147aeb789e41513259b6590491a8b8c69a08

  • SSDEEP

    6144:N/LtLNSdWnGMuVIOXfbZz4Z4OfVt90cqUBY:N/BxSdWnHPGbZsr7ehK

Score
10/10
rhadamanthyscollectiondiscoveryspywarestealer

Malware Config

Targets

    • Target

      022bbd9bb6b00684b58b0e52634eabca829f2c7ed9a91a20f7cf8fb3c54ab36b

    • Size

      326KB

    • MD5

      1c7e1a1bb9aa49735c85cf33bdfd82b2

    • SHA1

      33947723dc869c5caad9bdd24f0b638edb050d56

    • SHA256

      022bbd9bb6b00684b58b0e52634eabca829f2c7ed9a91a20f7cf8fb3c54ab36b

    • SHA512

      97ec6c863a9d127e2ceb59185a2d12893f609b1ee5e2ec5d32561f13bc304c5a003a649e704003ae2da039579317147aeb789e41513259b6590491a8b8c69a08

    • SSDEEP

      6144:N/LtLNSdWnGMuVIOXfbZz4Z4OfVt90cqUBY:N/BxSdWnHPGbZsr7ehK

    Score
    10/10
    rhadamanthyscollectiondiscoveryspywarestealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks