Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    915701f1afb2c06b564be989ba6f78997b34bbe5ddf85e9edfc617487870a0be

  • Size

    354KB

  • Sample

    230318-sd7daseg2w

  • MD5

    5b3b11362caf1ead03bb3a40c1187e12

  • SHA1

    6fa8308e677dc9513f1611ce69f6d2a4f9ede2ab

  • SHA256

    915701f1afb2c06b564be989ba6f78997b34bbe5ddf85e9edfc617487870a0be

  • SHA512

    28bff49f32b13ef3dbbcf25c9951375a62976ab6395922cf3db82a4b7584c5a15ccbff5f6b9d02d2770bd2a0ae79a1727152fe2eb47db88b52fc69659c6d0b5a

  • SSDEEP

    3072:JvgJJMFLOuP929W2iJCEYg8KpByirihhWBXuhN/e+ybwcbHn1AFzNO75MRtCcyK:GJMFLOu129/WpB4DW+yn+jUK

Score
10/10
rhadamanthysstealer

Malware Config

Targets

    • Target

      915701f1afb2c06b564be989ba6f78997b34bbe5ddf85e9edfc617487870a0be

    • Size

      354KB

    • MD5

      5b3b11362caf1ead03bb3a40c1187e12

    • SHA1

      6fa8308e677dc9513f1611ce69f6d2a4f9ede2ab

    • SHA256

      915701f1afb2c06b564be989ba6f78997b34bbe5ddf85e9edfc617487870a0be

    • SHA512

      28bff49f32b13ef3dbbcf25c9951375a62976ab6395922cf3db82a4b7584c5a15ccbff5f6b9d02d2770bd2a0ae79a1727152fe2eb47db88b52fc69659c6d0b5a

    • SSDEEP

      3072:JvgJJMFLOuP929W2iJCEYg8KpByirihhWBXuhN/e+ybwcbHn1AFzNO75MRtCcyK:GJMFLOu129/WpB4DW+yn+jUK

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks