Extracted

• • Target

    SensApi.dll

  • Size

    1.9MB

  • MD5

    7b5b5391950e247ea71476dced1a4817

  • SHA1

    650ab434b877a4dfaab4984fb60ac8906e090e22

  • SHA256

    4560efffe292602f48a57073a98fcf7424549bbfab76e1bf646330151717d669

  • SHA512

    500fecb16a8441e8a061c6fff5552bc69497e74f8ecac54b8b439ea3aa6bab59bab42dd9ffab813ec197859d3feca6488a1f163d88ada813685015e195a3dc15

  • SSDEEP

    49152:OLbVkg26M9R/2LU5WNDPbu3UgEZLOkALP7fi6HW2C1:OPB1M9R/2LU54DPbuWkkkrHW2C1

  Score

  10^/10

  rhadamanthysdiscoverypersistencestealer

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Rhadamanthys family

    rhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Adds Run key to start application

    persistence

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral1behavioral2

• • Target

    视频和图片资料被盗版 - Music Plus.exe

  • Size

    1.0MB

  • MD5

    b89a82fb10e98f2fdf51fa82c7366dd3

  • SHA1

    dd814833bbb4600a835dd5dee1eaab826d2923b6

  • SHA256

    154a791e737a878965eb50ea879bc96857ef88602d94e169a75b1a6607e6018e

  • SHA512

    5c6389dd767c6cc983ab7e4b67a5196c1892f781b47839c49d9863e37a531b458bd7092597a5c8b98271906e7df067e8ac5b1faaec036b1c06ba04508951a6e4

  • SSDEEP

    12288:eCAo1EtxbJ5Ai5BMZPxSLEFHC+85GgPSTf8YRf6xQNU3Op:eCAo1EtxbDlKP859PSTFRfHNU3K

  Score

  10^/10

  rhadamanthysdiscoverypersistencestealer

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Rhadamanthys family

    rhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Adds Run key to start application

    persistence

  • Suspicious use of NtCreateThreadExHideFromDebugger

  behavioral3behavioral4