Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a9ba9a87c8de9b41fe1ccccc45f0969adede4b2008ccf182244d38364ebbcfc1

  • Size

    364KB

  • Sample

    230315-2qphpaaa3v

  • MD5

    f90771655bdbd24f86c7ab1c24d6c9b1

  • SHA1

    1929b179bb3553b071b4cfe5fa763b0b30538839

  • SHA256

    a9ba9a87c8de9b41fe1ccccc45f0969adede4b2008ccf182244d38364ebbcfc1

  • SHA512

    e06e380e8f0bfd0889aba0bdc21841683bd71102f77aaf31c7a38eaa2e582906d44364ca81d76abef8c3d53009056b717e7d71a2619b9abdef442a8a1fb0475c

  • SSDEEP

    3072:2IztI59uOLz0cxVA5irWnanv0OxvkSYBSjUM9AkQPjFedtH2epexE4tp/MnRxSTL:JztiLTPZn8OxvpjzAFbSXwxEpvkYU

Score
10/10
rhadamanthysstealer

Malware Config

Targets

    • Target

      a9ba9a87c8de9b41fe1ccccc45f0969adede4b2008ccf182244d38364ebbcfc1

    • Size

      364KB

    • MD5

      f90771655bdbd24f86c7ab1c24d6c9b1

    • SHA1

      1929b179bb3553b071b4cfe5fa763b0b30538839

    • SHA256

      a9ba9a87c8de9b41fe1ccccc45f0969adede4b2008ccf182244d38364ebbcfc1

    • SHA512

      e06e380e8f0bfd0889aba0bdc21841683bd71102f77aaf31c7a38eaa2e582906d44364ca81d76abef8c3d53009056b717e7d71a2619b9abdef442a8a1fb0475c

    • SSDEEP

      3072:2IztI59uOLz0cxVA5irWnanv0OxvkSYBSjUM9AkQPjFedtH2epexE4tp/MnRxSTL:JztiLTPZn8OxvpjzAFbSXwxEpvkYU

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix

Tasks