Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ccb395a7a90077e6ffbc83271161a15a430df16b3782c1df82c4a7027961fab0

  • Size

    313KB

  • Sample

    230323-wnzb8abc5s

  • MD5

    9255085885a1eee00e484315bd770af0

  • SHA1

    0b8cd15126c74ead2778ee78d029d1805ad10504

  • SHA256

    ccb395a7a90077e6ffbc83271161a15a430df16b3782c1df82c4a7027961fab0

  • SHA512

    688d0e82c160eae00f1428a6d9f506c3968d74afef4933e75a38876990db9b13551ebd1ce936544d31ddb463d6a9b30e5cfbacc9e4a0ecfcefd4aa1d3ebf7856

  • SSDEEP

    6144:d2eGmL82ZIFyw+Etc9/LPz01dQ5KCud5Gm:dJGmYEIIYy/Lw19Xr

Score
10/10
rhadamanthysstealer

Malware Config

Targets

    • Target

      ccb395a7a90077e6ffbc83271161a15a430df16b3782c1df82c4a7027961fab0

    • Size

      313KB

    • MD5

      9255085885a1eee00e484315bd770af0

    • SHA1

      0b8cd15126c74ead2778ee78d029d1805ad10504

    • SHA256

      ccb395a7a90077e6ffbc83271161a15a430df16b3782c1df82c4a7027961fab0

    • SHA512

      688d0e82c160eae00f1428a6d9f506c3968d74afef4933e75a38876990db9b13551ebd1ce936544d31ddb463d6a9b30e5cfbacc9e4a0ecfcefd4aa1d3ebf7856

    • SSDEEP

      6144:d2eGmL82ZIFyw+Etc9/LPz01dQ5KCud5Gm:dJGmYEIIYy/Lw19Xr

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks