General
- Target setup.exe
- Size 247KB
- Sample230316-sdaz4abd38
- SHA256 e58e023032ae186acf32d80de52ae9878769f04f77ae6a3f8c28d549ad8e027f
- MD5 8374f85cf3cca6916e44b45536072775
- SHA1 54aefaee41b14aaf6495f23bffdfe17fd0ef782f
- SHA512 1ff1c072c79b175fb7d985392ffe7df54564b4668cc6dadf2e1942432889a1d0ee74e27d6c051861b7c87c2bcd2d56341914b5506b007b7c8143687b3d57c78b
- SSDEEP 6144:ZecS7yC2tktjMD59qevFXrrKprUe0En0f2:ZecS7yC2tkxMV1PU90s
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 247KB
- SHA256 e58e023032ae186acf32d80de52ae9878769f04f77ae6a3f8c28d549ad8e027f
- MD5 8374f85cf3cca6916e44b45536072775
- SHA1 54aefaee41b14aaf6495f23bffdfe17fd0ef782f
- SHA512 1ff1c072c79b175fb7d985392ffe7df54564b4668cc6dadf2e1942432889a1d0ee74e27d6c051861b7c87c2bcd2d56341914b5506b007b7c8143687b3d57c78b
- SSDEEP 6144:ZecS7yC2tktjMD59qevFXrrKprUe0En0f2:ZecS7yC2tkxMV1PU90s
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtSetInformationThreadHideFromDebugger