Extracted

• • Target

    Portable_x32_x64.zip

  • Size

    5.2MB

  • MD5

    fe91478f39a6102b8239dd1bbdab4925

  • SHA1

    8ff28f5976a4243f44491af7aa36478c22b231e5

  • SHA256

    03d60f06db313f892881188829f27c813efe8a4e987af1f483a4bbbcd78159db

  • SHA512

    07975105bd921cf5d0c2479c7efa2e86d0396033125a59e45bcb659c240023622c19f4beeea967bd524fd8bb701653bd7c7cb3338b78f8e43aee3ca02bef3b52

  • SSDEEP

    98304:SxXm/N+nGIdm2laGQEzAGeRDohW4PCpQCGroaDvhU2J1gXgT:SxXmWdm2lkDSq0oat1

  Score

  10^/10

  rhadamanthysdiscoverystealer

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2