Extracted

• • Target

    f6894063d1b05604cb4c98e38a5e76b72dcd2f792833500aceb7a6b186cbd326

  • Size

    240KB

  • MD5

    1d54a1a6620f07ff1c12822bf1f5c5af

  • SHA1

    fbf7a5ba1feac0e4c395e77a01c510e2340bbd60

  • SHA256

    f6894063d1b05604cb4c98e38a5e76b72dcd2f792833500aceb7a6b186cbd326

  • SHA512

    c8a48b1d42bbc60a10ce186bd2abe135b1c466d88e638f5b789dd0243879aef92806742ffee8a7bcd1103a0a58b3519f52617ed8c912b9975418aa31ca43fd37

  • SSDEEP

    6144:cC1N40Fnr0602TzhldWqIk6jKSxPMkPOR0u:cC1VFng60OCHNMNKu

  Score

  10^/10

  rhadamanthysdiscoverystealer

  • Detect rhadamanthys stealer shellcode

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2