Extracted

• • Target

    SecuriteInfo.com.Win32.Evo-gen.7414.29071.exe

  • Size

    2.7MB

  • MD5

    44bfe82d2a51a9683be239862885e68e

  • SHA1

    6bd6644818b00cde8147ee6fdfa42c89ad160ff0

  • SHA256

    b1a7d59539e789763e967266520191c1c5e76671d3955caf69eb8491952b14d9

  • SHA512

    e6534a42d85d49e581587798d83c6c2ad5b56a71b4628c43a0f028244d0fb5f0d1ec6163cc4f6ff4898450e5298961a788d4191284b8b0ceace11cf9d7b51bc6

  • SSDEEP

    49152:YXSVB7xMLe8fU/Q/kU/Q/yIEgVFtM+pj9fMTss:jMLe2U/Q/kU/Q/RE+vUX

  Score

  10^/10

  rhadamanthysdiscoverystealer

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Rhadamanthys family

    rhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2