Extracted

• • Target

    876feac850e9030e3aff1b7bd69f85a613d21661e9350b7fa10dd263a61724fe.dll

  • Size

    652KB

  • MD5

    536bc1eadab8af8f052544cfcd5150ec

  • SHA1

    ff3c9ee18e0e6f3f3a7b04e6c4c210d0adf29232

  • SHA256

    876feac850e9030e3aff1b7bd69f85a613d21661e9350b7fa10dd263a61724fe

  • SHA512

    33eae31cee1dd47e490111c7cd2fc0871e69b5a42fb24d807aa52b65ca9a6e457028ff8bea1ca2115a05f4ff99dd2c6c8075e3267d19b62b15087b437ca09d6c

  • SSDEEP

    12288:vgQY+jL8MsthpNREymEG26+hbE64VJuzl8vr4JHdi7:vy5thpNRFxXblE67mX7

  Score

  10^/10

  discoveryrhadamanthysstealer

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Suspicious use of SetThreadContext

  behavioral1behavioral2