General
- Target setup.exe
- Size 333KB
- Sample230405-dshadsdd8w
- SHA256 def37ed3e6ccca831f35008fcf829583d483939669a9bbc8410f9ce9fb303d6e
- MD5 0d59e7d7e996a61f8fabd546d1c0f298
- SHA1 c4d58ca0161a851784641d59d5179b3a28785834
- SHA512 9e96f4828a14685382ad19f1d85c0234a9fe73615a273c874f24ccad2696d1b45e90e64be4468f7a0ff157aae2a924069a5b843849effbc312519b91811cb90d
- SSDEEP 6144:OHv6soVCMPERIuPJ4XvNDu+Iu+x1QAbRQaW:OHv6soEMP41mxu+IuopbRo
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230221-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 333KB
- SHA256 def37ed3e6ccca831f35008fcf829583d483939669a9bbc8410f9ce9fb303d6e
- MD5 0d59e7d7e996a61f8fabd546d1c0f298
- SHA1 c4d58ca0161a851784641d59d5179b3a28785834
- SHA512 9e96f4828a14685382ad19f1d85c0234a9fe73615a273c874f24ccad2696d1b45e90e64be4468f7a0ff157aae2a924069a5b843849effbc312519b91811cb90d
- SSDEEP 6144:OHv6soVCMPERIuPJ4XvNDu+Iu+x1QAbRQaW:OHv6soEMP41mxu+IuopbRo
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles