General
- Target setup.exe
- Size 263KB
- Sample230408-baxw1sbb99
- SHA256 bee408f8a719302224b40ebacef5bd733b1aa4262dd7552c0e95f808b5c9aefc
- MD5 f429fd679226ab4f60b5f4df81d941a1
- SHA1 c6465b0b57d6716405c14f40abe34ec200934f40
- SHA512 47712f24c545ec3a56b14f441a1461983f2b5c81b1ddec5759afab601d229cb9b630df498946c48aff0010c1d0dc7686d97014414ba90e30fefa94852d664b62
- SSDEEP 3072:OvZ99I/9hcwXHS0fG+DA6nKTM/JsajLY50bPBVks05qTKmAG8zqEl0051mM0S4:yh6O+gTMBspGpnDm1mM0
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 263KB
- SHA256 bee408f8a719302224b40ebacef5bd733b1aa4262dd7552c0e95f808b5c9aefc
- MD5 f429fd679226ab4f60b5f4df81d941a1
- SHA1 c6465b0b57d6716405c14f40abe34ec200934f40
- SHA512 47712f24c545ec3a56b14f441a1461983f2b5c81b1ddec5759afab601d229cb9b630df498946c48aff0010c1d0dc7686d97014414ba90e30fefa94852d664b62
- SSDEEP 3072:OvZ99I/9hcwXHS0fG+DA6nKTM/JsajLY50bPBVks05qTKmAG8zqEl0051mM0S4:yh6O+gTMBspGpnDm1mM0
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles