General
- Target setup.exe
- Size 345KB
- Sample230313-qpj12aae33
- SHA256 318fdc3e4e806a8640f03c86d2eadc23dd0a04ce1d1f2ce44710c870749dcf09
- MD5 314fc0102c8e52051fa46547108fc236
- SHA1 e75a6cdfaa9403289da9303fec5fbfa624c8e1e2
- SHA512 7a4b85f51efe05a7e4076d948e3d5c1a5d86762714ed594bb5d94721a25a9b4ee9df8ee073ba7d5920f0b98cc3fa5bd588e5b3d80a80a254b9dcb1ad331e27e6
- SSDEEP 6144:2SzLnN4ksDsjcWn3z2DJTa/ILAH5ZupAT:20TNFsYjcW3zKJT4PupQ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 345KB
- SHA256 318fdc3e4e806a8640f03c86d2eadc23dd0a04ce1d1f2ce44710c870749dcf09
- MD5 314fc0102c8e52051fa46547108fc236
- SHA1 e75a6cdfaa9403289da9303fec5fbfa624c8e1e2
- SHA512 7a4b85f51efe05a7e4076d948e3d5c1a5d86762714ed594bb5d94721a25a9b4ee9df8ee073ba7d5920f0b98cc3fa5bd588e5b3d80a80a254b9dcb1ad331e27e6
- SSDEEP 6144:2SzLnN4ksDsjcWn3z2DJTa/ILAH5ZupAT:20TNFsYjcW3zKJT4PupQ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtSetInformationThreadHideFromDebugger