General
- Target setup.exe
- Size 304KB
- Sample230331-bxd3esgb67
- SHA256 46a7eb96c41d62ee330d147c1b9e9672b5c341abb88d49b11a7aee7732a374eb
- MD5 4aaafed46391c66cf2159f5a0ee79675
- SHA1 e102bbf8ccf91fb809c325750c77e96a57648aff
- SHA512 dc6b3f0a60969d2ae12d2977e303045e5338025fd33ba43f9bf2c8e9e7b775ecdffcb375f26e45e5503efc3e4a328e21844a1eb0571216e79b2ac8076076b527
- SSDEEP 3072:JnWKcSozW78PIw4nvSzib6SEZta3tJcbklAX4j3Pxg2XkweYL0oJs2EdIDZnXwSa:vUeRw4nvSzwI4TPlkQL7J0GpXnv7of
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230221-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 304KB
- SHA256 46a7eb96c41d62ee330d147c1b9e9672b5c341abb88d49b11a7aee7732a374eb
- MD5 4aaafed46391c66cf2159f5a0ee79675
- SHA1 e102bbf8ccf91fb809c325750c77e96a57648aff
- SHA512 dc6b3f0a60969d2ae12d2977e303045e5338025fd33ba43f9bf2c8e9e7b775ecdffcb375f26e45e5503efc3e4a328e21844a1eb0571216e79b2ac8076076b527
- SSDEEP 3072:JnWKcSozW78PIw4nvSzib6SEZta3tJcbklAX4j3Pxg2XkweYL0oJs2EdIDZnXwSa:vUeRw4nvSzwI4TPlkQL7J0GpXnv7of
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtSetInformationThreadHideFromDebugger