Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    582a72175cdc80169a0b2e3189c642593edd339d11b8bf71712d1122f59cb320

  • Size

    447KB

  • Sample

    230619-pzdfkadh48

  • MD5

    d173a8674b42d9d6351011cc7306095b

  • SHA1

    4c4d9cb601c1d697279fd73e4cbf7876f56e9661

  • SHA256

    582a72175cdc80169a0b2e3189c642593edd339d11b8bf71712d1122f59cb320

  • SHA512

    0eb2d52d53cae89f35c3848afcd241e5884c19ae815f59d11ae15d2d5d5dc3e82acae4ac63402edd48885e5a672eefce243384500403cd0d69da7b796fc7f482

  • SSDEEP

    6144:PbIglHOf4k+kku4pPxs9m86atE1w/3pHho68CjW7t4ACM3oY4k4xNzZ0NqrEZm:PbTluf4pwPMC+18pOpkW+AqnNSNq

Score
10/10
rhadamanthyscollectionstealer

Malware Config

Targets

    • Target

      582a72175cdc80169a0b2e3189c642593edd339d11b8bf71712d1122f59cb320

    • Size

      447KB

    • MD5

      d173a8674b42d9d6351011cc7306095b

    • SHA1

      4c4d9cb601c1d697279fd73e4cbf7876f56e9661

    • SHA256

      582a72175cdc80169a0b2e3189c642593edd339d11b8bf71712d1122f59cb320

    • SHA512

      0eb2d52d53cae89f35c3848afcd241e5884c19ae815f59d11ae15d2d5d5dc3e82acae4ac63402edd48885e5a672eefce243384500403cd0d69da7b796fc7f482

    • SSDEEP

      6144:PbIglHOf4k+kku4pPxs9m86atE1w/3pHho68CjW7t4ACM3oY4k4xNzZ0NqrEZm:PbTluf4pwPMC+18pOpkW+AqnNSNq

    Score
    10/10
    rhadamanthyscollectionstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Deletes itself

    • Accesses Microsoft Outlook profiles

      collection
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks