General
- Target ba088732d44be132a71090b44a92a184.exe
- Size 315KB
- Sample230403-pt342agc8w
- SHA256 481920cc54ecf2c808fbf29cff0376e792afe6b10bb44737ff4b782b4e735db7
- MD5 ba088732d44be132a71090b44a92a184
- SHA1 138578e60c5239c5ce779b65638705f9c85aa18b
- SHA512 379c0df35300287c4da34257dfb7bc90e855663a4a0a9d84f7de16fb712b184025df1bb0d8bd5edf9a7eb4aa2704f086a34acf1faafd4914f0055a034762448d
- SSDEEP 6144:gwQb1gglc7q4S84O31Hy41FhgmY5Ztkjt:gw41flcFS84Y1Hz1wmY5Gt
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
ba088732d44be132a71090b44a92a184.exe
Resource
win7-20230220-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
ba088732d44be132a71090b44a92a184.exe
Resource
win10v2004-20230220-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target ba088732d44be132a71090b44a92a184.exe
- Size 315KB
- SHA256 481920cc54ecf2c808fbf29cff0376e792afe6b10bb44737ff4b782b4e735db7
- MD5 ba088732d44be132a71090b44a92a184
- SHA1 138578e60c5239c5ce779b65638705f9c85aa18b
- SHA512 379c0df35300287c4da34257dfb7bc90e855663a4a0a9d84f7de16fb712b184025df1bb0d8bd5edf9a7eb4aa2704f086a34acf1faafd4914f0055a034762448d
- SSDEEP 6144:gwQb1gglc7q4S84O31Hy41FhgmY5Ztkjt:gw41flcFS84Y1Hz1wmY5Gt
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of NtSetInformationThreadHideFromDebugger