General
- Target setup.exe
- Size 251KB
- Sample230321-chvbjaad5s
- SHA256 0458746488bfc7b98664fe384e53bbde97024537aaf97e96b6851f95e5a5d706
- MD5 9f4cafcfeecb46ebe2eacdf524924dfe
- SHA1 a074c48136ea48542d6ae059f5864479ceb09d32
- SHA512 914b6eb87bd9379ca1081ae3381562bb67090a58c18bf4c6a1ab0edd9db72b0e6b667ccac2a05e47f9e2f38c8838570bddbb8767a231f71d091b6c1350a044dc
- SSDEEP 3072:3bhrk2yzQeW9kMGaEIjEJR92NpoJ+4YoYOCtKvkHdVLo8tAICc3I7qZ:lkxA9GacQNpWNY1Olc2ICc3
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 251KB
- SHA256 0458746488bfc7b98664fe384e53bbde97024537aaf97e96b6851f95e5a5d706
- MD5 9f4cafcfeecb46ebe2eacdf524924dfe
- SHA1 a074c48136ea48542d6ae059f5864479ceb09d32
- SHA512 914b6eb87bd9379ca1081ae3381562bb67090a58c18bf4c6a1ab0edd9db72b0e6b667ccac2a05e47f9e2f38c8838570bddbb8767a231f71d091b6c1350a044dc
- SSDEEP 3072:3bhrk2yzQeW9kMGaEIjEJR92NpoJ+4YoYOCtKvkHdVLo8tAICc3I7qZ:lkxA9GacQNpWNY1Olc2ICc3
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of NtSetInformationThreadHideFromDebugger