General
- Target setup.exe
- Size 297KB
- Sample230330-r2eshsda88
- SHA256 b702711a949a596fff343b6cfbaee3c0600e0e7feb2cf1bba8b663b926c94cf4
- MD5 1b56ba80ed97b7c748e41e03bcf0fd61
- SHA1 40fec612b50421a655390d21d672821f489c6576
- SHA512 8e4a9307e12d521261a825007e01d4dd33844a1b116fec4d501eb525e70bfb5dee475f57d37b6f0fc01301f66a458284e87fbac6ba9cb33b601dce37532a3d50
- SSDEEP 6144:cm5Za9waIPw55lJ3yWAaNBA3p3sjYh0N+nZCXzKe:c0Zlhw55bSaM3tWYhKE
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 297KB
- SHA256 b702711a949a596fff343b6cfbaee3c0600e0e7feb2cf1bba8b663b926c94cf4
- MD5 1b56ba80ed97b7c748e41e03bcf0fd61
- SHA1 40fec612b50421a655390d21d672821f489c6576
- SHA512 8e4a9307e12d521261a825007e01d4dd33844a1b116fec4d501eb525e70bfb5dee475f57d37b6f0fc01301f66a458284e87fbac6ba9cb33b601dce37532a3d50
- SSDEEP 6144:cm5Za9waIPw55lJ3yWAaNBA3p3sjYh0N+nZCXzKe:c0Zlhw55bSaM3tWYhKE
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of NtSetInformationThreadHideFromDebugger