General
- Target sample.exe
- Size 246KB
- Sample230317-dplteagb2x
- SHA256 dfb1707c43b702b1e42ce3ded92929aba1ba5a4e58541da459497a3b35a27490
- MD5 0fa551d62828473aaff743ecdc500a9f
- SHA1 3f89cb13c3a70e65ee631182f5826dfca806616d
- SHA512 9089aea85e5c859e986abdcb9b2b995bbdd5c6d3f0737bdf6cb380b6f7807624bdfbcfa935e732036b2d78dca627fab3eaaf6c2f7fa53f958157ac098122a678
- SSDEEP 6144:JrqrZzeOqSGgud1gtSPQO20K463ccpwhhvJ:JrqrpLGgS1TYO203S/pu
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
sample.exe
Resource
win7-20230220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
sample.exe
Resource
win10v2004-20230220-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target sample.exe
- Size 246KB
- SHA256 dfb1707c43b702b1e42ce3ded92929aba1ba5a4e58541da459497a3b35a27490
- MD5 0fa551d62828473aaff743ecdc500a9f
- SHA1 3f89cb13c3a70e65ee631182f5826dfca806616d
- SHA512 9089aea85e5c859e986abdcb9b2b995bbdd5c6d3f0737bdf6cb380b6f7807624bdfbcfa935e732036b2d78dca627fab3eaaf6c2f7fa53f958157ac098122a678
- SSDEEP 6144:JrqrZzeOqSGgud1gtSPQO20K463ccpwhhvJ:JrqrpLGgS1TYO203S/pu
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtSetInformationThreadHideFromDebugger