General
- Target setup.exe
- Size 264KB
- Sample230409-bcnq5aaa8w
- SHA256 c0093f55371c87e201ef12c1f98becc18dee2afab323d8d97e8605ce5a08c2d1
- MD5 fc1b43bd15336833638a4175395a420b
- SHA1 2066bc865bd89338f35e7074b5b5d305b2a3d0d3
- SHA512 7e19546cb3b51f22150c52000f63fc9d5e79a45673dcbc1d699c1f52f3ccf3ff5d58c7332f711dc0fbe3f5cda5c6331d4723d724dde439481fff9c1106618fb1
- SSDEEP 3072:LdTGoS8N8WAKVsCMZtjWbK0GO1d/X0CqLzhLWOO6RalTpIC5OBsy:5SyN8bT6bJP/UWCrl
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 264KB
- SHA256 c0093f55371c87e201ef12c1f98becc18dee2afab323d8d97e8605ce5a08c2d1
- MD5 fc1b43bd15336833638a4175395a420b
- SHA1 2066bc865bd89338f35e7074b5b5d305b2a3d0d3
- SHA512 7e19546cb3b51f22150c52000f63fc9d5e79a45673dcbc1d699c1f52f3ccf3ff5d58c7332f711dc0fbe3f5cda5c6331d4723d724dde439481fff9c1106618fb1
- SSDEEP 3072:LdTGoS8N8WAKVsCMZtjWbK0GO1d/X0CqLzhLWOO6RalTpIC5OBsy:5SyN8bT6bJP/UWCrl
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles