General

  • Target

    01eedbeaad73c0b83cc2524be1554f77d81d7cf3690979c87266e7274386ded6

  • Size

    315KB

  • Sample

    230402-ykke1abe8y

  • MD5

    79e4f870fdb964f873913ffaf7de449f

  • SHA1

    fc180981d7d79d10cff523c7b067b3a0b25fc93d

  • SHA256

    01eedbeaad73c0b83cc2524be1554f77d81d7cf3690979c87266e7274386ded6

  • SHA512

    c420790c012b0c5e7a0c304091c9d6a988e73c764b366d64515f1fc9a0cc8f9c736f1a0964f172fc7f2b5031461135ea4d33787ca868a9612e6b7637ceb473be

  • SSDEEP

    6144:xYdpcyt11QsRryGLx3RfBJRhebZ57rdHVZtkjt:CWyt3Qs8c5hzCbHTGt

Score
10/10

Malware Config

Targets

    • Target

      01eedbeaad73c0b83cc2524be1554f77d81d7cf3690979c87266e7274386ded6

    • Size

      315KB

    • MD5

      79e4f870fdb964f873913ffaf7de449f

    • SHA1

      fc180981d7d79d10cff523c7b067b3a0b25fc93d

    • SHA256

      01eedbeaad73c0b83cc2524be1554f77d81d7cf3690979c87266e7274386ded6

    • SHA512

      c420790c012b0c5e7a0c304091c9d6a988e73c764b366d64515f1fc9a0cc8f9c736f1a0964f172fc7f2b5031461135ea4d33787ca868a9612e6b7637ceb473be

    • SSDEEP

      6144:xYdpcyt11QsRryGLx3RfBJRhebZ57rdHVZtkjt:CWyt3Qs8c5hzCbHTGt

    Score
    10/10
    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks