General
- Target setup.exe
- Size 257KB
- Sample230404-bxdrnaea41
- SHA256 447102cbda0f30fdb352c94f4809d1301287bf232298760e7471dcfb718364ec
- MD5 2738ae4d00769e05e7dee2ce3a97e502
- SHA1 0656c139b158d62007c43b5bf53ea948ac99d5fd
- SHA512 030b3651aa1d78b0f3a82181b5a7e5fcd414f413eca622e75d8e7e6ac26f8971b60f0f12d99373352fe20fad22d4ab8a7cff3bbc01ffba095b72e6d35114542b
- SSDEEP 6144:yvQHfoig6jUGHYfka4PA15GufcwbROZq+/ERtZ1:mQHfoipbKrTGVwbRV+kz
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 257KB
- SHA256 447102cbda0f30fdb352c94f4809d1301287bf232298760e7471dcfb718364ec
- MD5 2738ae4d00769e05e7dee2ce3a97e502
- SHA1 0656c139b158d62007c43b5bf53ea948ac99d5fd
- SHA512 030b3651aa1d78b0f3a82181b5a7e5fcd414f413eca622e75d8e7e6ac26f8971b60f0f12d99373352fe20fad22d4ab8a7cff3bbc01ffba095b72e6d35114542b
- SSDEEP 6144:yvQHfoig6jUGHYfka4PA15GufcwbROZq+/ERtZ1:mQHfoipbKrTGVwbRV+kz
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles