Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b2248dc4e56d9d0b0e312e019262b3e3edeb30d15f74c7e8a99f2931b543b8a2

  • Size

    342KB

  • Sample

    230327-erenjsde9x

  • MD5

    8b71645a7eb55ca9c0fe52c2edab720b

  • SHA1

    05ea0c95375d83864faed13be6e0ef3220f93c1b

  • SHA256

    b2248dc4e56d9d0b0e312e019262b3e3edeb30d15f74c7e8a99f2931b543b8a2

  • SHA512

    53be44eab0bb846f9ec85ef19aa4d6cfd874b8eaf3b3deb81a3f9f822848bd560113317cdf0b6efc872271524ffa85d7828237d67a48bab03781dd56d1a48ad6

  • SSDEEP

    6144:MknAqr35e32+UIt35XpbztfMdhluxmZIt7ff:McAk3s32+UIdlfMdhlvgrf

Score
10/10
rhadamanthyscollectionstealer

Malware Config

Targets

    • Target

      b2248dc4e56d9d0b0e312e019262b3e3edeb30d15f74c7e8a99f2931b543b8a2

    • Size

      342KB

    • MD5

      8b71645a7eb55ca9c0fe52c2edab720b

    • SHA1

      05ea0c95375d83864faed13be6e0ef3220f93c1b

    • SHA256

      b2248dc4e56d9d0b0e312e019262b3e3edeb30d15f74c7e8a99f2931b543b8a2

    • SHA512

      53be44eab0bb846f9ec85ef19aa4d6cfd874b8eaf3b3deb81a3f9f822848bd560113317cdf0b6efc872271524ffa85d7828237d67a48bab03781dd56d1a48ad6

    • SSDEEP

      6144:MknAqr35e32+UIt35XpbztfMdhluxmZIt7ff:McAk3s32+UIdlfMdhlvgrf

    Score
    10/10
    rhadamanthyscollectionstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks