General
- Target setup.exe
- Size 397KB
- Sample230402-bcnfcsdg63
- SHA256 feb5487ea80521645196d869335bbc829280c03bd83b5d9e6a0f0e1e23b1a1c3
- MD5 0ff50a2908535351a560e42def77c509
- SHA1 8fcfc9b45f17943657762c0ae1459f14e95e555e
- SHA512 5d3e566651b56ca4fa2b218cdd7ce64f721e2a4420f1d68c6a2d4db4c84198bef5308a4605870034a7722b374162b8393c1dc3ac2a7963c936bfdbaaefc08e51
- SSDEEP 6144:/fRW2RboYqLaQxnICyfCcnl2hVmQXoat72BIwg:/JdJoYqLaQpITCuYhVtDS2F
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20230220-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 397KB
- SHA256 feb5487ea80521645196d869335bbc829280c03bd83b5d9e6a0f0e1e23b1a1c3
- MD5 0ff50a2908535351a560e42def77c509
- SHA1 8fcfc9b45f17943657762c0ae1459f14e95e555e
- SHA512 5d3e566651b56ca4fa2b218cdd7ce64f721e2a4420f1d68c6a2d4db4c84198bef5308a4605870034a7722b374162b8393c1dc3ac2a7963c936bfdbaaefc08e51
- SSDEEP 6144:/fRW2RboYqLaQxnICyfCcnl2hVmQXoat72BIwg:/JdJoYqLaQpITCuYhVtDS2F
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect rhadamanthys stealer shellcode
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Suspicious use of NtSetInformationThreadHideFromDebugger