General
- Target SecuriteInfo.com.Variant.Zusy.452743.28202.15365.exe
- Size 259KB
- Sample230313-a5secaaa71
- SHA256 097d2ea2206640a38d027b8e4e5ef23c5ae60f41141e8437b9004d4230c83480
- MD5 90b216001f0d3fb4fcf5741146b84e25
- SHA1 280f85fef5119444b72f52a58af594de7472d750
- SHA512 b20631047baaa183166f992128d315dba6b8ff0b600c3007d436107f45868715d94b356a586534bec45936a1366222cca61accc2458a0e43f733f4aed7a9a959
- SSDEEP 6144:jg1wSVzgignTsIvPfY8WotnoF8nj8ujuq:qwSWFTsyP3nuq
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Zusy.452743.28202.15365.exe
Resource
win7-20230220-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Zusy.452743.28202.15365.exe
Resource
win10v2004-20230220-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.Variant.Zusy.452743.28202.15365.exe
- Size 259KB
- SHA256 097d2ea2206640a38d027b8e4e5ef23c5ae60f41141e8437b9004d4230c83480
- MD5 90b216001f0d3fb4fcf5741146b84e25
- SHA1 280f85fef5119444b72f52a58af594de7472d750
- SHA512 b20631047baaa183166f992128d315dba6b8ff0b600c3007d436107f45868715d94b356a586534bec45936a1366222cca61accc2458a0e43f733f4aed7a9a959
- SSDEEP 6144:jg1wSVzgignTsIvPfY8WotnoF8nj8ujuq:qwSWFTsyP3nuq
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of NtSetInformationThreadHideFromDebugger