General
- Target setup.exe
- Size 419KB
- Sample230322-by4pgaeb64
- SHA256 4bed42a91c0bea778b8cd2a60e68b8fb0982006a2640781f3fea2c81798fcca1
- MD5 1dc54f7e2fe1e126dad15767658a1951
- SHA1 1737399ab29d8a0d8c959ad70bd071ad2fcbfb9a
- SHA512 01400b910fd19ef1411e06d62d4368fb7f1d9673740b122bc46f42b89534426f75d40106e15b3aa4a193b55faaabbc7e8a645b95829701267613f0d944286fd2
- SSDEEP 6144:QnbPLRmEKfNxLXxLPCp0lVD5OUqc6PucWHogWq:KbP1mEANFXh0UqcNcWhW
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 419KB
- SHA256 4bed42a91c0bea778b8cd2a60e68b8fb0982006a2640781f3fea2c81798fcca1
- MD5 1dc54f7e2fe1e126dad15767658a1951
- SHA1 1737399ab29d8a0d8c959ad70bd071ad2fcbfb9a
- SHA512 01400b910fd19ef1411e06d62d4368fb7f1d9673740b122bc46f42b89534426f75d40106e15b3aa4a193b55faaabbc7e8a645b95829701267613f0d944286fd2
- SSDEEP 6144:QnbPLRmEKfNxLXxLPCp0lVD5OUqc6PucWHogWq:KbP1mEANFXh0UqcNcWhW
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of NtSetInformationThreadHideFromDebugger