Overview

overview

10

Static

static

1

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c9a7960e8775b4651a864b026887b878c6ba19da17845169da2ae55a3f62bb4

  • Size

    425KB

  • Sample

    230414-f18tesgc88

  • MD5

    508b07b12e1bddf3d338367f3289003e

  • SHA1

    cc9f5c84f51f06ac247e0b7fa6366ee36c5db928

  • SHA256

    4c9a7960e8775b4651a864b026887b878c6ba19da17845169da2ae55a3f62bb4

  • SHA512

    85001f13c3b25b5578a93a1b38193f9cba7f14349c138b1544e4f88502f2afb4cf137106171da9787aa7a31e79214f0e53eca9b9fe137a428720238fd8af4b01

  • SSDEEP

    6144:deKM7SYjhM6zGLuRG/GI6sneflIzS6VqzNyeqXbf7Znfkmykbb7jt:MKUSQM6qLuR6GIOfezQpyeWH9Eab

Score
10/10
rhadamanthyscollectionstealer

Malware Config

Extracted

Family

rhadamanthys

C2

http://179.43.142.201/img/favicon.png

Targets

    • Target

      4c9a7960e8775b4651a864b026887b878c6ba19da17845169da2ae55a3f62bb4

    • Size

      425KB

    • MD5

      508b07b12e1bddf3d338367f3289003e

    • SHA1

      cc9f5c84f51f06ac247e0b7fa6366ee36c5db928

    • SHA256

      4c9a7960e8775b4651a864b026887b878c6ba19da17845169da2ae55a3f62bb4

    • SHA512

      85001f13c3b25b5578a93a1b38193f9cba7f14349c138b1544e4f88502f2afb4cf137106171da9787aa7a31e79214f0e53eca9b9fe137a428720238fd8af4b01

    • SSDEEP

      6144:deKM7SYjhM6zGLuRG/GI6sneflIzS6VqzNyeqXbf7Znfkmykbb7jt:MKUSQM6qLuR6GIOfezQpyeWH9Eab

    Score
    10/10
    rhadamanthyscollectionstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Accesses Microsoft Outlook profiles

      collection
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks