Extracted

• • Target

    8763813113.exe

  • Size

    448KB

  • MD5

    9efdb9b9eb70d34702b4b30cf8f5bb7d

  • SHA1

    76eb914250cc4a75232744827d3f9751ff634a21

  • SHA256

    cd30eb3dd9b99f4a7a39e3608e1e50ae2333870c93c59c8e7bcfb898040bbffa

  • SHA512

    d55a0c001778dc6b3d71bc393b98a3c961b16dcf6c117f4397cafa2ac23b5f9fda90e4dd3e3d90cd67a593092bc128b8995e50e436f97313aac7bc9f6189e361

  • SSDEEP

    6144:L/E8DIpjK28t4snQTlp3z/pSZ+pDKpf9EkQbKxVK+PXItNOapG8RuzRiRh3Zi:dEpj7snkv/cgu4VGn6OaM+ucj

  Score

  10^/10

  rhadamanthysdiscoverystealer

  • Detect rhadamanthys stealer shellcode

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Rhadamanthys family

    rhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1