General
- Target setup.exe
- Size 297KB
- Sample230331-byjdjahe7s
- SHA256 b1c5d2eadbb2936f8b9644a5a4e24b5c54b163f0f2d6817c60edb3e5a73c6dc6
- MD5 774d9b0e9a37531882c9e6413de30388
- SHA1 07332f7f13ea21f62e3c18c90802632e51f7d754
- SHA512 6b0f0b650820a3a1cb79abc37864e14597185b625545b0dd411b1a80c346348e51b6cee66042f77f7acbd63d1eef46dab42dc91b18c053b144efdf95fe040ffc
- SSDEEP 6144:+1RcRDsIvSzXCeypRjhEodAnTx+RoCJGvikkzg5pHBVw:UcRgIvSzXCeyPhEoetBCJWikkzg5pHBV
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 297KB
- SHA256 b1c5d2eadbb2936f8b9644a5a4e24b5c54b163f0f2d6817c60edb3e5a73c6dc6
- MD5 774d9b0e9a37531882c9e6413de30388
- SHA1 07332f7f13ea21f62e3c18c90802632e51f7d754
- SHA512 6b0f0b650820a3a1cb79abc37864e14597185b625545b0dd411b1a80c346348e51b6cee66042f77f7acbd63d1eef46dab42dc91b18c053b144efdf95fe040ffc
- SSDEEP 6144:+1RcRDsIvSzXCeypRjhEodAnTx+RoCJGvikkzg5pHBVw:UcRgIvSzXCeyPhEoetBCJWikkzg5pHBV
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of NtSetInformationThreadHideFromDebugger