General
- Target setup.exe
- Size 373KB
- Sample230410-bbhhqaeb63
- SHA256 008a8ec151cc1eb318e153ca506efc96641fce3173790c47bf2203d27df40eed
- MD5 cf59c06eb34e2c3245a2aaab823f3101
- SHA1 7c3345bd500be2bb0428728331f8d341df74b9eb
- SHA512 da19df63e87be4020c651b526e15f892c216bfc12e0e20544289c3184d6ca7536a1c197b75f72e978e714e9c87d4242586e9df6cda8186fb362ba92ee7946d45
- SSDEEP 6144:9wi2Kh6TzMZ7am2scFM2/BKTUCOsX4mDDsS:9wixh6TzMZ7aZsyD/BKTUVsX4I
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 373KB
- SHA256 008a8ec151cc1eb318e153ca506efc96641fce3173790c47bf2203d27df40eed
- MD5 cf59c06eb34e2c3245a2aaab823f3101
- SHA1 7c3345bd500be2bb0428728331f8d341df74b9eb
- SHA512 da19df63e87be4020c651b526e15f892c216bfc12e0e20544289c3184d6ca7536a1c197b75f72e978e714e9c87d4242586e9df6cda8186fb362ba92ee7946d45
- SSDEEP 6144:9wi2Kh6TzMZ7am2scFM2/BKTUCOsX4mDDsS:9wixh6TzMZ7aZsyD/BKTUVsX4I
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Accesses Microsoft Outlook profiles