Extracted

• • Target

    github/setup.exe

  • Size

    386KB

  • MD5

    e8b9cdee9161158dddb56f95de383e45

  • SHA1

    afd22ccb83824b9fc77d9b6c5863a8db38174ee1

  • SHA256

    d2ff960faa177b580fe8105e67aaa9fa8c0077768d685d47a54420f28cd053c2

  • SHA512

    eefa3489f755a85e951d50508004a500bc49cec13b505927653cc261b75567d11f4fa35003a283050d9d9e51ca6d56099e5976b453557fe908dcf96e75fb1635

  • SSDEEP

    6144:pwY0C52EIPbosrauPYskgsxLNizYv1voD4cW/3xs0TtxGFjH88Pew8DyofjP8:E7raqrkdv1vW4cW/x9txsjHbP04

  Score

  10^/10

  rhadamanthysdiscoverystealer

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Rhadamanthys family

    rhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Suspicious use of SetThreadContext

  behavioral1behavioral2