Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f7af86dadf3d82857b2963a660b9cfcab6d21332888a7da414bc22108ddfce5

  • Size

    316KB

  • Sample

    230401-vszywabd57

  • MD5

    68a7c23d4fe2e789b1b3e0238c10230c

  • SHA1

    be8846b87f4d657bdd4574df29ab5a9538cfe173

  • SHA256

    4f7af86dadf3d82857b2963a660b9cfcab6d21332888a7da414bc22108ddfce5

  • SHA512

    a954baf57af69789ac1b72fccf14e8f680ab3923c43bb2e261aa805b105cedfe80b8fa2774fdc9c78e2e0e6dc3de4e657007f25c004b7d54d476da52e057e2ff

  • SSDEEP

    3072:ql8T7GxiplX47e0KNfmYWAoZO9HfD6sBqJzCLFz+E9EdiVWNXF/LWqzJySMDtdiG:e07IK0KNL0sn+EediV0EO+hFqP6PqJs

Score
10/10
rhadamanthysstealer

Malware Config

Targets

    • Target

      4f7af86dadf3d82857b2963a660b9cfcab6d21332888a7da414bc22108ddfce5

    • Size

      316KB

    • MD5

      68a7c23d4fe2e789b1b3e0238c10230c

    • SHA1

      be8846b87f4d657bdd4574df29ab5a9538cfe173

    • SHA256

      4f7af86dadf3d82857b2963a660b9cfcab6d21332888a7da414bc22108ddfce5

    • SHA512

      a954baf57af69789ac1b72fccf14e8f680ab3923c43bb2e261aa805b105cedfe80b8fa2774fdc9c78e2e0e6dc3de4e657007f25c004b7d54d476da52e057e2ff

    • SSDEEP

      3072:ql8T7GxiplX47e0KNfmYWAoZO9HfD6sBqJzCLFz+E9EdiVWNXF/LWqzJySMDtdiG:e07IK0KNL0sn+EediV0EO+hFqP6PqJs

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks