Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c2f3e534f06d42ceb372e17f3d9bf8782d7caf6b6771e2b076935cddadb59091

  • Size

    257KB

  • Sample

    230314-xrk5fahc79

  • MD5

    a9195a5dbfd91562dbd273a02103b0fa

  • SHA1

    9f9b68dec09280f16702ee90742ae8fa156622e4

  • SHA256

    c2f3e534f06d42ceb372e17f3d9bf8782d7caf6b6771e2b076935cddadb59091

  • SHA512

    84124fdc57d10012a2b9e096d6f53fa004239c139ecbcfa5d2dd2879dad5b449915cff8ecfb17c7149b340af2f00e6408b986c874a7aa5c4d179cfb0c8fe4335

  • SSDEEP

    3072:/aqXB7xgAthp9i6e4WFUMNF0glNjhiR4/vh3p4X6QeWlUe7ZzMzNhgeYV:7B73tnZc7RNp37iJe0NORY

Score
10/10
rhadamanthyscollectionstealer

Malware Config

Targets

    • Target

      c2f3e534f06d42ceb372e17f3d9bf8782d7caf6b6771e2b076935cddadb59091

    • Size

      257KB

    • MD5

      a9195a5dbfd91562dbd273a02103b0fa

    • SHA1

      9f9b68dec09280f16702ee90742ae8fa156622e4

    • SHA256

      c2f3e534f06d42ceb372e17f3d9bf8782d7caf6b6771e2b076935cddadb59091

    • SHA512

      84124fdc57d10012a2b9e096d6f53fa004239c139ecbcfa5d2dd2879dad5b449915cff8ecfb17c7149b340af2f00e6408b986c874a7aa5c4d179cfb0c8fe4335

    • SSDEEP

      3072:/aqXB7xgAthp9i6e4WFUMNF0glNjhiR4/vh3p4X6QeWlUe7ZzMzNhgeYV:7B73tnZc7RNp37iJe0NORY

    Score
    10/10
    rhadamanthyscollectionstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks