Extracted

• • Target

    solara_2.exe

  • Size

    11.5MB

  • MD5

    10205252ca249fa1c32b459db98d2da0

  • SHA1

    55201ee77daf0beb89a475d4c719e90df54d0ef5

  • SHA256

    51e95071ed43d6e2feb3fb36433dcc0a0193b7b041dddf452b1837cac7df4f11

  • SHA512

    bdc99f8494b1b554df42f2d48dba93a6d1d1ef196543f695ad8395a239cb7aba539b7bde984f4204d2f010ed3dbc774b944fed9a255b79a16195021fa2cb2469

  • SSDEEP

    196608:y2rX5Z1ztd1I+HqNkmZEt5gebZ2HYVf6/E6SPKpvx7Dnx9QR4ktSc5+msp8PQoiA:bTJJjICmeVbZ6Ydv6SPKphx9QRwmshob

  Score

  10^/10

  rhadamanthysdiscoverystealer

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1