Extracted

Extracted

Extracted

• • Target

    setup.exe

  • Size

    351KB

  • MD5

    5177c43bdc09e3ae3bcb339155c9a44e

  • SHA1

    62cc81793c80b95651b82114d7fd6c65c8d0bbea

  • SHA256

    62db8b5a7a321ce6c180f142e15f8c6dc00407f5ae673afdf5c3b40417291a78

  • SHA512

    eff43474f5f4e18d40a801b4701571047a8f4d4d71dd5d45f5b4398625e6757e2b930527db2158d17b359bcd21eb79e9e92d9225cb78a8a8cddc598e91665b3e

  • SSDEEP

    6144:NH9j4XbZMyxmt6yk0IkhMUOFQQ/fcpLPE42:NHFIVMyot6BuhhQ/0pz

  Score

  10^/10

  smokeloaderpub4backdoortrojanrhadamanthyscollectionstealer

  • Detect rhadamanthys stealer shellcode

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2