Overview

overview

10

Static

static

3

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a0bbc093f81f707df0605522c49769644ba94065b98e305c38d0344bf962989f

  • Size

    451KB

  • Sample

    230713-y1hw4sba23

  • MD5

    5022731bc59d09c612d5611e9bb61714

  • SHA1

    3e463b051eaa4ece0d0d0aef733d851f4b6c7e25

  • SHA256

    a0bbc093f81f707df0605522c49769644ba94065b98e305c38d0344bf962989f

  • SHA512

    3abbb8f2c57cbb970964fbe249006020865c544035611c50dd2cf8d7401e5aef72af2bc3ec3d32ed3b9cf224ea1ec208d071b4747aa52f6ac7631626832b466d

  • SSDEEP

    6144:erZoydZuKMpU4HoU2fVuTVbJjDN+6hs9lQhB9Jodm9FElws:eloyPIiU2fVuTVbdDN+6hME9Sw9g

Score
10/10
rhadamanthysstealer

Malware Config

Targets

    • Target

      a0bbc093f81f707df0605522c49769644ba94065b98e305c38d0344bf962989f

    • Size

      451KB

    • MD5

      5022731bc59d09c612d5611e9bb61714

    • SHA1

      3e463b051eaa4ece0d0d0aef733d851f4b6c7e25

    • SHA256

      a0bbc093f81f707df0605522c49769644ba94065b98e305c38d0344bf962989f

    • SHA512

      3abbb8f2c57cbb970964fbe249006020865c544035611c50dd2cf8d7401e5aef72af2bc3ec3d32ed3b9cf224ea1ec208d071b4747aa52f6ac7631626832b466d

    • SSDEEP

      6144:erZoydZuKMpU4HoU2fVuTVbJjDN+6hs9lQhB9Jodm9FElws:eloyPIiU2fVuTVbdDN+6hME9Sw9g

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    behavioral1

MITRE ATT&CK Matrix

Tasks