General
- Target setup.exe
- Size 346KB
- Sample230326-bny18sfa35
- SHA256 e131641d24a0f1cd82af1a2d7b68bf9f11022fbcd79986f939b083574945003c
- MD5 44c5171c7eab781f1c3c4441b1673d7f
- SHA1 c8c9fe0aebc6ffb675da0934ede7f140a75feef8
- SHA512 8262e24f6d9bf4a5840e0f3eecfc696ace7ed45084282dacea6344fea41971aaff3ea845a44dbf603b720376783971bf35985cc0e14da7a2fcf5214576c44a43
- SSDEEP 6144:+FpPXW3uYXCLNviT2POrI+oPcdp/9FoRenqTfz:+Fpu3dXCLN6CiRoPcdtKz
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 346KB
- SHA256 e131641d24a0f1cd82af1a2d7b68bf9f11022fbcd79986f939b083574945003c
- MD5 44c5171c7eab781f1c3c4441b1673d7f
- SHA1 c8c9fe0aebc6ffb675da0934ede7f140a75feef8
- SHA512 8262e24f6d9bf4a5840e0f3eecfc696ace7ed45084282dacea6344fea41971aaff3ea845a44dbf603b720376783971bf35985cc0e14da7a2fcf5214576c44a43
- SSDEEP 6144:+FpPXW3uYXCLNviT2POrI+oPcdp/9FoRenqTfz:+Fpu3dXCLN6CiRoPcdtKz
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of NtSetInformationThreadHideFromDebugger