General

  • Target

    187f766a280d15577490301da3a7d49abfdabb1caea42a00b2367a5ab2300bc2

  • Size

    359KB

  • Sample

    230317-x9bzgsbg2s

  • MD5

    aa9c4113fcdb964ecddb81661c9d388d

  • SHA1

    b1c3e933f10303ac8a443053afa68913994ce1d2

  • SHA256

    187f766a280d15577490301da3a7d49abfdabb1caea42a00b2367a5ab2300bc2

  • SHA512

    5d857f4ddb4578bc401b0cfe791111682f93ebe650879450a0e643289bfb0b7ec158e91870fa408988b3de932c8be672412464f92d49bf26dbe17ab9b65903be

  • SSDEEP

    6144:fxJYLY8+L9qRq74G8EmV/P1zZaekWfMqnOSu:ZJY1+ZqE74G8E46Qru

Score
10/10

Malware Config

Targets

    • Target

      187f766a280d15577490301da3a7d49abfdabb1caea42a00b2367a5ab2300bc2

    • Size

      359KB

    • MD5

      aa9c4113fcdb964ecddb81661c9d388d

    • SHA1

      b1c3e933f10303ac8a443053afa68913994ce1d2

    • SHA256

      187f766a280d15577490301da3a7d49abfdabb1caea42a00b2367a5ab2300bc2

    • SHA512

      5d857f4ddb4578bc401b0cfe791111682f93ebe650879450a0e643289bfb0b7ec158e91870fa408988b3de932c8be672412464f92d49bf26dbe17ab9b65903be

    • SSDEEP

      6144:fxJYLY8+L9qRq74G8EmV/P1zZaekWfMqnOSu:ZJY1+ZqE74G8E46Qru

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks