Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3f56fa023c3eb59308210a824d04f745b1e54b66235f0fef956c15c8b365edfe

  • Size

    291KB

  • Sample

    230327-lm85xseg9s

  • MD5

    a74199ea82b5484b7765fd006c3c9a53

  • SHA1

    a1145f58de678fcd69fe8f89576768d41cdd288c

  • SHA256

    3f56fa023c3eb59308210a824d04f745b1e54b66235f0fef956c15c8b365edfe

  • SHA512

    6b1e8444e20969ab6dc64f2e6cb6734b70b3afd57d9ce53d35e88d0c453f4f715f01cb66f5dd58bb0790852985e4376cd7151b120402e17b81124d657afc79e1

  • SSDEEP

    6144:YJirDSLw32aamA+Q0arI9xk09Tky5cjjXgG+uqwGRjbna:XrDSE3z9A+vac9xk07cYG+uVkra

Score
10/10
rhadamanthyscollectionstealer

Malware Config

Targets

    • Target

      3f56fa023c3eb59308210a824d04f745b1e54b66235f0fef956c15c8b365edfe

    • Size

      291KB

    • MD5

      a74199ea82b5484b7765fd006c3c9a53

    • SHA1

      a1145f58de678fcd69fe8f89576768d41cdd288c

    • SHA256

      3f56fa023c3eb59308210a824d04f745b1e54b66235f0fef956c15c8b365edfe

    • SHA512

      6b1e8444e20969ab6dc64f2e6cb6734b70b3afd57d9ce53d35e88d0c453f4f715f01cb66f5dd58bb0790852985e4376cd7151b120402e17b81124d657afc79e1

    • SSDEEP

      6144:YJirDSLw32aamA+Q0arI9xk09Tky5cjjXgG+uqwGRjbna:XrDSE3z9A+vac9xk07cYG+uVkra

    Score
    10/10
    rhadamanthyscollectionstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks