Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Resubmissions

27-11-2024 10:05

241127-l4hpasypes 10

19-09-2023 18:33

230919-w7cbssbb9w 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    57939197bad88b1f26555826a1de37b5527483a5583745cd614aff349cb41ea4

  • Size

    456KB

  • Sample

    230919-w7cbssbb9w

  • MD5

    c5c64755f463c91c92f516b3214c5b37

  • SHA1

    04b2137cf45cf32ad141c52ac66f67687bc7f35c

  • SHA256

    57939197bad88b1f26555826a1de37b5527483a5583745cd614aff349cb41ea4

  • SHA512

    9435b7d5d14de252e75335c80091ae3670bdf3be2cf02116b52ae7c1852e00085d8a601b19440af4034ce42da716972943bf9368bcde77870f9981f5f779cdd0

  • SSDEEP

    6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+g:2uWP/BZUyoLu8Agsmxwrvejkd2

Score
10/10
rhadamanthyscollectionstealer

Malware Config

Targets

    • Target

      57939197bad88b1f26555826a1de37b5527483a5583745cd614aff349cb41ea4

    • Size

      456KB

    • MD5

      c5c64755f463c91c92f516b3214c5b37

    • SHA1

      04b2137cf45cf32ad141c52ac66f67687bc7f35c

    • SHA256

      57939197bad88b1f26555826a1de37b5527483a5583745cd614aff349cb41ea4

    • SHA512

      9435b7d5d14de252e75335c80091ae3670bdf3be2cf02116b52ae7c1852e00085d8a601b19440af4034ce42da716972943bf9368bcde77870f9981f5f779cdd0

    • SSDEEP

      6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+g:2uWP/BZUyoLu8Agsmxwrvejkd2

    Score
    10/10
    rhadamanthyscollectionstealer

    • Detect rhadamanthys stealer shellcode

    • Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

      stealerrhadamanthys

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Deletes itself

    • Accesses Microsoft Outlook profiles

      collection
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks