Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1e60bdf73d00af0f0d47876c9546af14b9db68d5245074d07686b608bb67faf0

  • Size

    397KB

  • Sample

    230402-fc9qtaga6x

  • MD5

    0f74f82c78498331790a5c0921e3eaad

  • SHA1

    b193ec495f33eaaef5df1442f7b8c1a99c3e8252

  • SHA256

    1e60bdf73d00af0f0d47876c9546af14b9db68d5245074d07686b608bb67faf0

  • SHA512

    d9c21cb2a4e2842e0e26b9a7ea3ac251e4b2d41288e3ed519a67bf0fcfa2a89f827e58af3e34856112f9d730093b96aa2e96d01cf99840a3c726f51b53a26c54

  • SSDEEP

    6144:q1RfdYiSKxibduQuR+/uv9CboEqzOFrSi:qHfdYiSOm/cCboYrSi

Score
10/10
rhadamanthysstealer

Malware Config

Targets

    • Target

      1e60bdf73d00af0f0d47876c9546af14b9db68d5245074d07686b608bb67faf0

    • Size

      397KB

    • MD5

      0f74f82c78498331790a5c0921e3eaad

    • SHA1

      b193ec495f33eaaef5df1442f7b8c1a99c3e8252

    • SHA256

      1e60bdf73d00af0f0d47876c9546af14b9db68d5245074d07686b608bb67faf0

    • SHA512

      d9c21cb2a4e2842e0e26b9a7ea3ac251e4b2d41288e3ed519a67bf0fcfa2a89f827e58af3e34856112f9d730093b96aa2e96d01cf99840a3c726f51b53a26c54

    • SSDEEP

      6144:q1RfdYiSKxibduQuR+/uv9CboEqzOFrSi:qHfdYiSOm/cCboYrSi

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks