Extracted

• • Target

    c1af977c484a2a05166f9b8d81fcdb709a40a13c66fee6d27cad638a8eba8662.exe

  • Size

    9.7MB

  • MD5

    ccb134bac1da598adcab9070ad6ef5db

  • SHA1

    b65e920ad8e375113bea86ae8393197040415391

  • SHA256

    c1af977c484a2a05166f9b8d81fcdb709a40a13c66fee6d27cad638a8eba8662

  • SHA512

    a8007cadd0fe27bd9a4e9a73cf9e094ef4a1b762506abfa67ad371ac80122701d40a224c7648ffc13bfa9951f28fd06e0b99bf25480c329e029acc0c435c3f0f

  • SSDEEP

    98304:fFmTtZ8FBvnmBtdvpcS1h26gEXvqzgNPuD:f28zPmBtdvK+NhXvqzgly

  Score

  10^/10

  discoveryrhadamanthysstealer

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2