Extracted

• • Target

    Oxfvbxp.exe

  • Size

    2.9MB

  • MD5

    53218d44298f406baefb2fd052eeb0ef

  • SHA1

    afc422b48b829f29ee2cb95eb9d5139b788a1727

  • SHA256

    11892dbe32cebd618deb6dc36477829ef9fb8181d7ec887408f44c08bb5f675b

  • SHA512

    88b81da7e8d3665b0a41cd272c50318b8090dc3240d88020255f079df1373e2cf5fb9f0249320fb7346a52a29d20de42a4385f75e1cf91a12aa40786eae1a12a

  • SSDEEP

    49152:zT8+dJPn7Vud6KGavAZXJgfx1HmwPKtWKbF1mIgZ+wau1CObHeIp3hPI4OH+Mfsk:38ROupbHeI7gf+MfA

  Score

  10^/10

  rhadamanthysdiscoverystealer

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2behavioral3behavioral4