General
- Target setup.exe
- Size 371KB
- Sample230316-seflzabd44
- SHA256 b4c8fc082585c01b0ff64a7088e77ead33433f1a34251aef7f228d86b615b821
- MD5 dd24a099d558e19a5c739666e4bc966e
- SHA1 a16f8f201ae838a06812ddf691d80bb5bc894f02
- SHA512 100feb712ff28060379fd02ca4ace82a4ca2718132650a3d27b18a3e47fe5c7a959d2e303b6e3bcec8f9ffac98282baf8bc9f2c4f6e7289bdd3880dc956b5d8f
- SSDEEP 6144:616mQGLjnPv7AXdP39CAhF5HnVY4joH128Gizb15WEz/Z8qTmu+2OH:6EmQG/nPv7EYAhF9SxPzbTvkL2
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 371KB
- SHA256 b4c8fc082585c01b0ff64a7088e77ead33433f1a34251aef7f228d86b615b821
- MD5 dd24a099d558e19a5c739666e4bc966e
- SHA1 a16f8f201ae838a06812ddf691d80bb5bc894f02
- SHA512 100feb712ff28060379fd02ca4ace82a4ca2718132650a3d27b18a3e47fe5c7a959d2e303b6e3bcec8f9ffac98282baf8bc9f2c4f6e7289bdd3880dc956b5d8f
- SSDEEP 6144:616mQGLjnPv7AXdP39CAhF5HnVY4joH128Gizb15WEz/Z8qTmu+2OH:6EmQG/nPv7EYAhF9SxPzbTvkL2
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtSetInformationThreadHideFromDebugger