Extracted

• • Target

    01E60000.exe

  • Size

    448KB

  • MD5

    d0c1a1ed8609b87ba25b771e8144b90c

  • SHA1

    0da8c2b9e109d97a574f0614550dc2311c331f85

  • SHA256

    a13376875d3b492eb818c5629afd3f97883be2a5154fa861e7879d5f770e21d4

  • SHA512

    b4ecd2234eb37ba01da6eae4a4da6c3d09d4675b84ef7f955664b38451ba7600041308efcf110561bb40461a907188bd044ff924fbdc01cb999eea309acaafd2

  • SSDEEP

    6144:L/E8DIpjK28t4snQBlp3z/pSZ+pDKpf9EkQbKxVK+PXItNOapG8RuzRiRh3Zi:dEpj7snGv/cgu4VGn6OaM+ucj

  Score

  10^/10

  rhadamanthysdiscoverystealer

  • Detect rhadamanthys stealer shellcode

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Rhadamanthys family

    rhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1