Extracted

• • Target

    rhada_pwsh.txt

  • Size

    472KB

  • MD5

    499f45aaf086179501deec2015d2f13c

  • SHA1

    a8f8fd84721a4ed88f70c3680970a99c53c5eddc

  • SHA256

    88cb7c954db8b07a3c50405f106a13327811a476b8640b8c04a2b2952fcee84d

  • SHA512

    b8866b50a53e6983c79806b5a3c8e114654b7511ddafdf1eac582ae86695a2fbcb9fa1f5500b8e6cb98cd898a469daf14586a9fc76075865d9d3477c9791158c

  • SSDEEP

    12288:1CQgw6wrf68klS1+t/WPwqwp1pQbQFtw1nT3DCOLZLtomL:1C/w6we8qY3wTpQmtEnT3DVjZ

  Score

  10^/10

  rhadamanthysstealer

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1