Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    92ac8eed03c6784e300ddad7aaec2f25b55bb400143e2792664b268943dd26fd

  • Size

    348KB

  • Sample

    230325-n6cl6sef8z

  • MD5

    d4412e0a864facf6079158afd40c91ed

  • SHA1

    cfaf715b4fa67db0990422f6d4ad4604418dd098

  • SHA256

    92ac8eed03c6784e300ddad7aaec2f25b55bb400143e2792664b268943dd26fd

  • SHA512

    e314dfd1d621536422c59982dd8535c15c3f420bbf6bcb9bb66ccc3a79dc6405c371b19c2a64fb287b8943c700abbc9f8ecdcb84839853783f7e78eb7f403800

  • SSDEEP

    6144:Y04kNjVqZ7pQQ1g2pIFzZculHC9L/4Cz5Ilz5vETfm:Y04kNjUZ7pQ0IFVcSHUQC0Mm

Score
10/10
rhadamanthyscollectionstealer

Malware Config

Targets

    • Target

      92ac8eed03c6784e300ddad7aaec2f25b55bb400143e2792664b268943dd26fd

    • Size

      348KB

    • MD5

      d4412e0a864facf6079158afd40c91ed

    • SHA1

      cfaf715b4fa67db0990422f6d4ad4604418dd098

    • SHA256

      92ac8eed03c6784e300ddad7aaec2f25b55bb400143e2792664b268943dd26fd

    • SHA512

      e314dfd1d621536422c59982dd8535c15c3f420bbf6bcb9bb66ccc3a79dc6405c371b19c2a64fb287b8943c700abbc9f8ecdcb84839853783f7e78eb7f403800

    • SSDEEP

      6144:Y04kNjVqZ7pQQ1g2pIFzZculHC9L/4Cz5Ilz5vETfm:Y04kNjUZ7pQ0IFVcSHUQC0Mm

    Score
    10/10
    rhadamanthyscollectionstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks