Overview

overview

10

Static

static

3

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59faadc8f8aaf3ca15aff0dccdc72f1fc347687e80b9d70a3af880c58644dee0

  • Size

    410KB

  • Sample

    230620-x6ydbafb21

  • MD5

    f0b566b8639cb58502ddfe8e48a2948a

  • SHA1

    13f884f4f418334785f20e1fa77ab823f6e49ec2

  • SHA256

    59faadc8f8aaf3ca15aff0dccdc72f1fc347687e80b9d70a3af880c58644dee0

  • SHA512

    cb38a9d98f77013417584e4db51e4f2ee0475f6f4ac619676e8fc5388d841632af04a4dc24d24924fcb2ce56b0ab4a4a508bdd2e0ab590150a4c14d89ed6f09b

  • SSDEEP

    6144:umyDuNXlSdNFzevree9CJN/unLD1sLWpi7ZPQOxEGuK59CJEc:umquNSFzArezJV0X1HpiNQOxEGJ

Score
10/10
rhadamanthyscollectionstealer

Malware Config

Targets

    • Target

      59faadc8f8aaf3ca15aff0dccdc72f1fc347687e80b9d70a3af880c58644dee0

    • Size

      410KB

    • MD5

      f0b566b8639cb58502ddfe8e48a2948a

    • SHA1

      13f884f4f418334785f20e1fa77ab823f6e49ec2

    • SHA256

      59faadc8f8aaf3ca15aff0dccdc72f1fc347687e80b9d70a3af880c58644dee0

    • SHA512

      cb38a9d98f77013417584e4db51e4f2ee0475f6f4ac619676e8fc5388d841632af04a4dc24d24924fcb2ce56b0ab4a4a508bdd2e0ab590150a4c14d89ed6f09b

    • SSDEEP

      6144:umyDuNXlSdNFzevree9CJN/unLD1sLWpi7ZPQOxEGuK59CJEc:umquNSFzArezJV0X1HpiNQOxEGJ

    Score
    10/10
    rhadamanthyscollectionstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Accesses Microsoft Outlook profiles

      collection
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks