Extracted

• • Target

    file.exe

  • Size

    448KB

  • MD5

    f5a4e48c469d899bf882475b36dff8d9

  • SHA1

    b1845ec95f2837038461a04dc266bcb48a052fcb

  • SHA256

    d850df618ed03fd518cb4c52bb09657a2eda865702a0498b965b0279ea73b362

  • SHA512

    8be14d34d360537a82532b8172d5ad4c257ac703f0ecbc021871d521723ff942101ba84c53ccbd3148808f2f7a3748bd478e7e1e89cb53e1d95a32907b81b003

  • SSDEEP

    6144:L/E8DIpjK28t4snQxlp3z/pSZ+pDKpf9EkQbKxVK+PXItNOapG8RuzRiRh3Zi:dEpj7snqv/cgu4VGn6OaM+ucj

  Score

  10^/10

  rhadamanthysdiscoverystealer

  • Detect rhadamanthys stealer shellcode

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Rhadamanthys family

    rhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1