Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    71410abe0923f4899fdd01fcc65a6b7e67ceef9ad6d649f13fe7a5c581a33e24

  • Size

    354KB

  • Sample

    230318-zhfvgafg7t

  • MD5

    a8b41c1712f895691cfa657a4ef41645

  • SHA1

    394381d21e2568d932bd6ca5dfbf77f3938b6506

  • SHA256

    71410abe0923f4899fdd01fcc65a6b7e67ceef9ad6d649f13fe7a5c581a33e24

  • SHA512

    a8551a6ed8e145cba09e9ad51bb42de4abe56c5541666cda9c62f6a0a13f027ca5c4f011d29ac40c6172a773378ad0990f227aec3a9e19036246a52e168641c1

  • SSDEEP

    6144:UJjML+3Y09VWn+nzVqcX4aaWp0o4spzSzGglXr:UJg8Y0jdaW+oPlSRr

Score
10/10
rhadamanthyscollectionstealer

Malware Config

Targets

    • Target

      71410abe0923f4899fdd01fcc65a6b7e67ceef9ad6d649f13fe7a5c581a33e24

    • Size

      354KB

    • MD5

      a8b41c1712f895691cfa657a4ef41645

    • SHA1

      394381d21e2568d932bd6ca5dfbf77f3938b6506

    • SHA256

      71410abe0923f4899fdd01fcc65a6b7e67ceef9ad6d649f13fe7a5c581a33e24

    • SHA512

      a8551a6ed8e145cba09e9ad51bb42de4abe56c5541666cda9c62f6a0a13f027ca5c4f011d29ac40c6172a773378ad0990f227aec3a9e19036246a52e168641c1

    • SSDEEP

      6144:UJjML+3Y09VWn+nzVqcX4aaWp0o4spzSzGglXr:UJg8Y0jdaW+oPlSRr

    Score
    10/10
    rhadamanthyscollectionstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks