Extracted

• • Target

    e120256386d8539da0219e924c31e4b4abe88296b0d7a37fe7c76c55f2aa076b.exe

  • Size

    4.4MB

  • MD5

    c48168d3274ceffc9699a5d641dce901

  • SHA1

    923f560257af26ece51321e652a85710173bd819

  • SHA256

    e120256386d8539da0219e924c31e4b4abe88296b0d7a37fe7c76c55f2aa076b

  • SHA512

    17a628ec62cf836d2a24cdb1689c7d0402cbed292187de322f1c55a1b3c1a106bb5ef964ec4db81dbd158950130990b245c445ea61acc28fed0b7ce09334c7f3

  • SSDEEP

    49152:WDKLhpZZRxvQs6mwTJsg4Rb2opcS1b2DMDi6gdu5zuw+DZ5TmvqzRRUNPljy7Lsw:WDshp5lQVmBtdvpcS1h26gEXvqzgNPu

  Score

  10^/10

  discoveryrhadamanthysstealer

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2