General

  • Target

    20107b3de7134d552972dc6dd0ec93d7b76f0debd6de14e691f07ff806af5117

  • Size

    316KB

  • Sample

    230402-lce44agh5t

  • MD5

    b993d45a401b9a70919623da67c5a972

  • SHA1

    bc6112555c423fa01abba2495b7957d7f0ab484d

  • SHA256

    20107b3de7134d552972dc6dd0ec93d7b76f0debd6de14e691f07ff806af5117

  • SHA512

    c5bdbecac143fdadc71ed43d96cb8fa616c18257860ff3b55c19c308f62421ee46cf471fbdcec610271ea4facc4966c9f4ee32869ee92c71bdb2229adefba153

  • SSDEEP

    6144:h7cF0xMQPW+2dav7OXyr5utz4UA0nxNHPo:hwFIMQPj2byr0tzRxNHPo

Score
10/10

Malware Config

Targets

    • Target

      20107b3de7134d552972dc6dd0ec93d7b76f0debd6de14e691f07ff806af5117

    • Size

      316KB

    • MD5

      b993d45a401b9a70919623da67c5a972

    • SHA1

      bc6112555c423fa01abba2495b7957d7f0ab484d

    • SHA256

      20107b3de7134d552972dc6dd0ec93d7b76f0debd6de14e691f07ff806af5117

    • SHA512

      c5bdbecac143fdadc71ed43d96cb8fa616c18257860ff3b55c19c308f62421ee46cf471fbdcec610271ea4facc4966c9f4ee32869ee92c71bdb2229adefba153

    • SSDEEP

      6144:h7cF0xMQPW+2dav7OXyr5utz4UA0nxNHPo:hwFIMQPj2byr0tzRxNHPo

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks