Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4e993c98839d5adf3246ee13f4d60f6166d028fcf6f8ec05137e5c2a1c5942cd

  • Size

    374KB

  • Sample

    230715-glesgaha86

  • MD5

    967775fbefc77938a36ef45c7deabccb

  • SHA1

    eb1bc33881ebaa4a47abbb2a9e4d3cbfd98a5b91

  • SHA256

    4e993c98839d5adf3246ee13f4d60f6166d028fcf6f8ec05137e5c2a1c5942cd

  • SHA512

    3d14fd1ac1af2b9646ed6dd46e57f27971a5368d7e9c766cee77ef17482333ca9d53570945f98edb436c58e9399ccb19816d89c4b2c1732c5bfd18d3d457bbd3

  • SSDEEP

    6144:d1LpxvA1F4D1BTjwypbU4YNWqfuUjxJFuDxBRdg9WIIg+xP0l7Ea/0:7deUBI6UtfuUjADJdjgoP0ea8

Score
10/10
rhadamanthysstealer

Malware Config

Targets

    • Target

      4e993c98839d5adf3246ee13f4d60f6166d028fcf6f8ec05137e5c2a1c5942cd

    • Size

      374KB

    • MD5

      967775fbefc77938a36ef45c7deabccb

    • SHA1

      eb1bc33881ebaa4a47abbb2a9e4d3cbfd98a5b91

    • SHA256

      4e993c98839d5adf3246ee13f4d60f6166d028fcf6f8ec05137e5c2a1c5942cd

    • SHA512

      3d14fd1ac1af2b9646ed6dd46e57f27971a5368d7e9c766cee77ef17482333ca9d53570945f98edb436c58e9399ccb19816d89c4b2c1732c5bfd18d3d457bbd3

    • SSDEEP

      6144:d1LpxvA1F4D1BTjwypbU4YNWqfuUjxJFuDxBRdg9WIIg+xP0l7Ea/0:7deUBI6UtfuUjADJdjgoP0ea8

    Score
    10/10
    rhadamanthysstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    behavioral1

MITRE ATT&CK Matrix

Tasks