Extracted

• • Target

    Setup.exe

  • Size

    62.8MB

  • MD5

    ff52e7b7b467b809e1a1f9dabbdbc932

  • SHA1

    7ea421f32351d3e23a83140870ef0e544657bf08

  • SHA256

    6c4028b4b5e8f71dc6bc723555067a597705290a7fee617cfb215ae642741d7e

  • SHA512

    372f41006ad989735a8ae2b93d376b27f4f4986f8cc1a131ab3ff932a1fd47395bc1c1c4129524fb343f8afb752f3dd386c76a8cf6d79597469ffe2cdaaac797

  • SSDEEP

    1572864:2WhYWhYWhYWhYWhYWhYWhYWhYWhYWhYWhYWh:2WhYWhYWhYWhYWhYWhYWhYWhYWhYWhYM

  Score

  10^/10

  rhadamanthysdiscoverystealer

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Legitimate hosting services abused for malware hosting/C2

  • Suspicious use of SetThreadContext

  behavioral1behavioral2