General
- Target setup.exe
- Size 332KB
- Sample230405-dtmw9sdd9v
- SHA256 9c6db3fe215b51656e4bdcba96197c7912106ad7cedcb2f856b227fedda86c37
- MD5 dfed337acd0fe7960dd1a8e2ccf77f53
- SHA1 94eef69118bcbd0ba1073b9b3bbc0e45dea356a5
- SHA512 debd00f6af58cd614415c3b643413f94a226835620d02b3680c4757b0610401c796bf77e4ccf0a2fecdd7581b49573a17399d945ff70cfdeec52615c707cdaee
- SSDEEP 6144:l3x7ZeqgDb/A2ourig5s/xi4Dcj6Yc8WnaW:l3x7Ze5Db/uuriX/xi4wjfc9n
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 332KB
- SHA256 9c6db3fe215b51656e4bdcba96197c7912106ad7cedcb2f856b227fedda86c37
- MD5 dfed337acd0fe7960dd1a8e2ccf77f53
- SHA1 94eef69118bcbd0ba1073b9b3bbc0e45dea356a5
- SHA512 debd00f6af58cd614415c3b643413f94a226835620d02b3680c4757b0610401c796bf77e4ccf0a2fecdd7581b49573a17399d945ff70cfdeec52615c707cdaee
- SSDEEP 6144:l3x7ZeqgDb/A2ourig5s/xi4Dcj6Yc8WnaW:l3x7Ze5Db/uuriX/xi4wjfc9n
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles