Extracted

• • Target

    4168be01921da70c6f5933f081b3d150N.exe

  • Size

    209KB

  • MD5

    4168be01921da70c6f5933f081b3d150

  • SHA1

    f1df6f865f224812701c74383aeab75c0d2d8476

  • SHA256

    5d81a61d7aa8d455c341b2da96f52104c6e3f41b1a0ca8011c2ca18a200fe9b9

  • SHA512

    d976568eb21c1fc1a84cfe9db4c86c6ac5cc6324468b9a4dfe2bb9624353cdf06acb16b837100fd1124e735039260d1cf5275f98677d992c0be48d34b8d782d8

  • SSDEEP

    6144:cC1N40Fnr0602TzhldWqIk6jKSxPMkPOR0:cC1VFng60OCHNMNK

  Score

  10^/10

  rhadamanthysdiscoverystealer

  • Detect rhadamanthys stealer shellcode

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2