General
- Target setup.exe
- Size 317KB
- Sample230402-bfjatafb41
- SHA256 1682a7f8f229e62c379fca3c6c989c748aef985e51fc6bcf76d06bde9b0484cf
- MD5 7fb1a9aff7e9f22621eedcf7ab334a88
- SHA1 a323bdc552e2c0fe4b0417c933031450bb2c206f
- SHA512 55ff1a83a7df7a7c35fcb2891aabc3112ab6086da8b0c9eed2167a9364a3535646217ec6bb48eccaeeb254b40dfaa6b9590f90e24f01637246abbbca760ea1d0
- SSDEEP 3072:cJdnwLsGs4XabZo4LumHWJT65JHppb+L6oHOnkuMFG5lbxmVOR6/SJ1qkEPQ2sPV:TF1EZo4L/rpb+Ls7lGORaSJ4I9lQn1
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 317KB
- SHA256 1682a7f8f229e62c379fca3c6c989c748aef985e51fc6bcf76d06bde9b0484cf
- MD5 7fb1a9aff7e9f22621eedcf7ab334a88
- SHA1 a323bdc552e2c0fe4b0417c933031450bb2c206f
- SHA512 55ff1a83a7df7a7c35fcb2891aabc3112ab6086da8b0c9eed2167a9364a3535646217ec6bb48eccaeeb254b40dfaa6b9590f90e24f01637246abbbca760ea1d0
- SSDEEP 3072:cJdnwLsGs4XabZo4LumHWJT65JHppb+L6oHOnkuMFG5lbxmVOR6/SJ1qkEPQ2sPV:TF1EZo4L/rpb+Ls7lGORaSJ4I9lQn1
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtSetInformationThreadHideFromDebugger