Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5b14c996624d71eaa98fd363667c531e4833d1db5117167fe2f979a181931dcc

  • Size

    364KB

  • Sample

    230318-kbhcdsbf82

  • MD5

    bc48029e188296a10c4a0cf441a4bbce

  • SHA1

    f309e09b19dad019ccc85b16ab000c7ac06b1d2f

  • SHA256

    5b14c996624d71eaa98fd363667c531e4833d1db5117167fe2f979a181931dcc

  • SHA512

    eb8edbe3f04c7c25fe9b58f448be66b9a069accefe97d5d4ca8e8b93ff8878cd6e2e599ae22f6dfbf94b76ec7f6bffc19515cfff4757eedfb51294b5001a3a04

  • SSDEEP

    3072:zMxKJ4QL+fFc9f9s/FGyISS0lfaaHkqXe6P+oWR2SgSIKdKMvO/X588tIfoL:zJ4QL+fF+f9sPRlf51632blKdKMG2aL

Score
10/10
rhadamanthysstealer

Malware Config

Targets

    • Target

      5b14c996624d71eaa98fd363667c531e4833d1db5117167fe2f979a181931dcc

    • Size

      364KB

    • MD5

      bc48029e188296a10c4a0cf441a4bbce

    • SHA1

      f309e09b19dad019ccc85b16ab000c7ac06b1d2f

    • SHA256

      5b14c996624d71eaa98fd363667c531e4833d1db5117167fe2f979a181931dcc

    • SHA512

      eb8edbe3f04c7c25fe9b58f448be66b9a069accefe97d5d4ca8e8b93ff8878cd6e2e599ae22f6dfbf94b76ec7f6bffc19515cfff4757eedfb51294b5001a3a04

    • SSDEEP

      3072:zMxKJ4QL+fFc9f9s/FGyISS0lfaaHkqXe6P+oWR2SgSIKdKMvO/X588tIfoL:zJ4QL+fF+f9sPRlf51632blKdKMG2aL

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks