Extracted

• • Target

    bca1b67bff83c7176473408db7c326ed.exe

  • Size

    444KB

  • MD5

    bca1b67bff83c7176473408db7c326ed

  • SHA1

    5abb405146389a8dbf97f34d4d283307ca879cfd

  • SHA256

    aaf61ffd433aa50c224ee70649d8543dd6377f036a0a4178bbdfe3536a4575a5

  • SHA512

    82b77f1a1b7d53fe87f3b2de4085c50a60ca54c77b49769dd78dff884ee99950b6bb134f3eded1408c7fba694af3508755bb9912fcc26a8b388e153fbe2f452f

  • SSDEEP

    6144:IjKvnAzRPqkroWHcrTIhB1uA2dOJhhgWbMbitWGFNuldsfiy3NiGA:Ijzgk00oIuA6ahE+F0/y36

  Score

  10^/10

  rhadamanthysdiscoverystealer

  • Detect rhadamanthys stealer shellcode

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Rhadamanthys family

    rhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1