Overview

overview

10

Static

static

3

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6ced925e4633e2d6dd30c976561ade77592ab2139c223abf3970e0affc8c657

  • Size

    447KB

  • Sample

    230619-szqmnseg73

  • MD5

    21adac496baa7e9df96398f71e6bc4ce

  • SHA1

    28b6f095f0148371c4faf6887cc5c424d0143b2e

  • SHA256

    c6ced925e4633e2d6dd30c976561ade77592ab2139c223abf3970e0affc8c657

  • SHA512

    f10fd711cef3353c7fc5462b825d76f6cc69b82520d63c58de34638a93c59ff49ba344eea1803fa3f19859c8ebd81280771aa31159f40c8d09ccee15fa9b5fb7

  • SSDEEP

    6144:+OtcOLCjCtJHp0vXr0ezxZoVNuviT59oOzQ69y4ONHddJhlF2TyrMjlrYHn7EZm:+cbLS20v71oV1T5aOzP961b2OrMjmHn

Score
10/10
rhadamanthyscollectionstealer

Malware Config

Targets

    • Target

      c6ced925e4633e2d6dd30c976561ade77592ab2139c223abf3970e0affc8c657

    • Size

      447KB

    • MD5

      21adac496baa7e9df96398f71e6bc4ce

    • SHA1

      28b6f095f0148371c4faf6887cc5c424d0143b2e

    • SHA256

      c6ced925e4633e2d6dd30c976561ade77592ab2139c223abf3970e0affc8c657

    • SHA512

      f10fd711cef3353c7fc5462b825d76f6cc69b82520d63c58de34638a93c59ff49ba344eea1803fa3f19859c8ebd81280771aa31159f40c8d09ccee15fa9b5fb7

    • SSDEEP

      6144:+OtcOLCjCtJHp0vXr0ezxZoVNuviT59oOzQ69y4ONHddJhlF2TyrMjlrYHn7EZm:+cbLS20v71oV1T5aOzP961b2OrMjmHn

    Score
    10/10
    rhadamanthyscollectionstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Accesses Microsoft Outlook profiles

      collection
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks