General
- Target setup.exe
- Size 373KB
- Sample230410-badhdaga41
- SHA256 4959d54796fe546e0b57aae0be269718aa80e1d58c4e4e2f69152291e0f570ac
- MD5 147402ef889308ce27faaeb9053e1b68
- SHA1 bf9aa0fe0ede39d7fc2b3d97579a2e619b3f5d39
- SHA512 878f861129524962ad6cc1fdb80abd868e380548dc2f1e9ef9a9a2e15e01308deea80214c2d0fcc793b66c5f3e452406744843cfadb15ab8f0a4a2c9ff7ce0d8
- SSDEEP 6144:5XKQuCRFsQ8LTSeSgoa8EL/9UF0d95FFqTrmDDsS:5XK8RztO7TL/WWLpqvI
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 373KB
- SHA256 4959d54796fe546e0b57aae0be269718aa80e1d58c4e4e2f69152291e0f570ac
- MD5 147402ef889308ce27faaeb9053e1b68
- SHA1 bf9aa0fe0ede39d7fc2b3d97579a2e619b3f5d39
- SHA512 878f861129524962ad6cc1fdb80abd868e380548dc2f1e9ef9a9a2e15e01308deea80214c2d0fcc793b66c5f3e452406744843cfadb15ab8f0a4a2c9ff7ce0d8
- SSDEEP 6144:5XKQuCRFsQ8LTSeSgoa8EL/9UF0d95FFqTrmDDsS:5XK8RztO7TL/WWLpqvI
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles