General
- Target setup.exe
- Size 305KB
- Sample230331-bv8t1she5v
- SHA256 bbefa1382f83a5df3c19bb217489d08c2747a03f0676821b73798b573128138f
- MD5 5fd41ef42ac35559f639aac9f750f6ab
- SHA1 8c713945defb974ea24e5d231aec422321bae94c
- SHA512 b95c815b0978df55c2e167b178bc9e3e39dc637943461bfe3c67c55791362f66b85769052b553764c2d4b132e13418ae89f834876dc89effeba8c9262dba8fa2
- SSDEEP 3072:2pp6yLn9AibdhTSj7a3joOgQHbDhQD6Vqd6AgXLv82bVq46ZinJnv/Gm0Su95wsV:2XDewY7aNlQIqW8effBX0/bMBJEf
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 305KB
- SHA256 bbefa1382f83a5df3c19bb217489d08c2747a03f0676821b73798b573128138f
- MD5 5fd41ef42ac35559f639aac9f750f6ab
- SHA1 8c713945defb974ea24e5d231aec422321bae94c
- SHA512 b95c815b0978df55c2e167b178bc9e3e39dc637943461bfe3c67c55791362f66b85769052b553764c2d4b132e13418ae89f834876dc89effeba8c9262dba8fa2
- SSDEEP 3072:2pp6yLn9AibdhTSj7a3joOgQHbDhQD6Vqd6AgXLv82bVq46ZinJnv/Gm0Su95wsV:2XDewY7aNlQIqW8effBX0/bMBJEf
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtSetInformationThreadHideFromDebugger