Extracted

• • Target

    Loader.exe

  • Size

    809KB

  • MD5

    1fa6f63dc052d94c27d91e79d36b69ac

  • SHA1

    31fc9f11f50deadeecfbec0471b191d573cfdc6a

  • SHA256

    a4b163b2ee1fe3ff2a3e673595942adac19fc76ddd18e823ef09c1c729796c53

  • SHA512

    44cca2e817a2b1895735003aa2f7c8e7559fe6cc3cff6006353d423814044dedf62f5d5da398ff6f5d12bfb6c4a7c4172ea1b86681b3bca9d480763e038a346d

  • SSDEEP

    12288:jedDsSDCFcmYF5uB9rbN7lDZJLU/IKiIWZs:Ax6cmYF5OV75Lk5iV

  Score

  10^/10

  rhadamanthysdiscoverystealer

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2behavioral3behavioral4