General
- Target setup.exe
- Size 397KB
- Sample230402-bedc6sdg67
- SHA256 c3584cdcbcf8a2bdf6a1dece0ab69208e4dceedd7b8be43072f1c65a68e13417
- MD5 532793f823b8be1c25057beb31637a3a
- SHA1 f53ff0f7c34c09b80eb57ce92304344f5a227b78
- SHA512 22e3431ceb6355c4a527f4572a8984c09521db67373b60a85bcbbb70b42f21b7f83479f9b76e3d1cf784bf5274bdcc741c347cc1ec49a569a53280867deabcf7
- SSDEEP 6144:wcC2pso8Gjn5djAOHK+GtkbnSbnD96Xi6ik:wJ2pso8GVJAOHXzaD9ui6ik
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230221-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 397KB
- SHA256 c3584cdcbcf8a2bdf6a1dece0ab69208e4dceedd7b8be43072f1c65a68e13417
- MD5 532793f823b8be1c25057beb31637a3a
- SHA1 f53ff0f7c34c09b80eb57ce92304344f5a227b78
- SHA512 22e3431ceb6355c4a527f4572a8984c09521db67373b60a85bcbbb70b42f21b7f83479f9b76e3d1cf784bf5274bdcc741c347cc1ec49a569a53280867deabcf7
- SSDEEP 6144:wcC2pso8Gjn5djAOHK+GtkbnSbnD96Xi6ik:wJ2pso8GVJAOHXzaD9ui6ik
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtSetInformationThreadHideFromDebugger