Extracted

• • Target

    file.exe

  • Size

    355KB

  • MD5

    cfab6075851faadd5de2efc7078979da

  • SHA1

    b430aa030c145c308e34a515600bdbba72c21332

  • SHA256

    728dff0eba668befcb91c693b7e9ea49a70b4d5cc4cb0bf9460837cbf58951ba

  • SHA512

    012e2a09ddc0cc6b10cbacbafa36b887a894d6c342d4a9457999f7682206e6e61acccd0df14cbdcbd8f32aaf236000ad4139a381110ff20aae83d4c65c78dc92

  • SSDEEP

    6144:g2qezd2ab1/RuHk+M3k8M3W7XomjOJCqshrOlumY6DMIewgxQfqbsb:gf2R/EEkCQFYDwRqg

  Score

  10^/10

  rhadamanthysdiscoverystealer

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Rhadamanthys family

    rhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Deletes itself

  behavioral1behavioral2