General
- Target ddcd466080475f3542d30691311cec3b.exe
- Size 353KB
- Sample230319-te3l6sbb5w
- SHA256 c7ca2f9065557a6d8fb0c02c75804d386b77ffca4466678b201c09e916afa096
- MD5 ddcd466080475f3542d30691311cec3b
- SHA1 5e1f2a6c5208afb6f90bf1ec62f53fca53174d8b
- SHA512 32ce7dd5259dbf1a46fde373615aaabb20da94906b699d38dd2ca4675fa5b4c5a023921d02d79995698964b6524eb5a82b8ecb27c798692ebee8b49e73bcbd3f
- SSDEEP 6144:e8unLv58M8MKDTB6pD7hZHalzLkL4UGh:DuntxEDQolU/Gh
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
ddcd466080475f3542d30691311cec3b.exe
Resource
win7-20230220-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
ddcd466080475f3542d30691311cec3b.exe
Resource
win10v2004-20230220-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target ddcd466080475f3542d30691311cec3b.exe
- Size 353KB
- SHA256 c7ca2f9065557a6d8fb0c02c75804d386b77ffca4466678b201c09e916afa096
- MD5 ddcd466080475f3542d30691311cec3b
- SHA1 5e1f2a6c5208afb6f90bf1ec62f53fca53174d8b
- SHA512 32ce7dd5259dbf1a46fde373615aaabb20da94906b699d38dd2ca4675fa5b4c5a023921d02d79995698964b6524eb5a82b8ecb27c798692ebee8b49e73bcbd3f
- SSDEEP 6144:e8unLv58M8MKDTB6pD7hZHalzLkL4UGh:DuntxEDQolU/Gh
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of NtSetInformationThreadHideFromDebugger