Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    454f54246c0e1a6ed2d493fc442292b93f1b66ccffc9f57bdf2307ef6d6d0388

  • Size

    307KB

  • Sample

    230329-jpw72aha3w

  • MD5

    15ccf8c9bac338729ac1b12e740b7fb7

  • SHA1

    f894d4e657b61b9548da60229809421206ed6064

  • SHA256

    454f54246c0e1a6ed2d493fc442292b93f1b66ccffc9f57bdf2307ef6d6d0388

  • SHA512

    fa06e9dd79ca2df21b2f0d65d2b8be7a176aa8002ad3de0159dfbaa1bd6059c86baa9782e77cad1807e5b8bd5e92b7b650d5d80c74b50f92198f40bb0e88895c

  • SSDEEP

    3072:o6GXZ+QKkLDnm3AQuh7jYFv55hT7kdYdwxB3uYCIfsCrou+0aavqPXX5eShM4:o5VKkLDpDqvDFZdwxBeYeMq0aWqP4q

Score
10/10
rhadamanthyscollectionstealer

Malware Config

Targets

    • Target

      454f54246c0e1a6ed2d493fc442292b93f1b66ccffc9f57bdf2307ef6d6d0388

    • Size

      307KB

    • MD5

      15ccf8c9bac338729ac1b12e740b7fb7

    • SHA1

      f894d4e657b61b9548da60229809421206ed6064

    • SHA256

      454f54246c0e1a6ed2d493fc442292b93f1b66ccffc9f57bdf2307ef6d6d0388

    • SHA512

      fa06e9dd79ca2df21b2f0d65d2b8be7a176aa8002ad3de0159dfbaa1bd6059c86baa9782e77cad1807e5b8bd5e92b7b650d5d80c74b50f92198f40bb0e88895c

    • SSDEEP

      3072:o6GXZ+QKkLDnm3AQuh7jYFv55hT7kdYdwxB3uYCIfsCrou+0aavqPXX5eShM4:o5VKkLDpDqvDFZdwxBeYeMq0aWqP4q

    Score
    10/10
    rhadamanthyscollectionstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks