Extracted

• • Target

    vincent_rhad.exe

  • Size

    456KB

  • MD5

    014b6d7fd900989ef6cbac0aaddf7026

  • SHA1

    f3bfdcd146a1c56da652dc1d3317c00b81b8e053

  • SHA256

    14ba649ece39c9ccd1c0aea0e1be52543860cd4046bd200bb9fe6c97e51a1319

  • SHA512

    11e98446af77f2fd6904d8c53adcd721777b824fdf6686c943acefea172e721b70f3c806d6ffa6f9f88d91cfbbfe76b06b3e98a17dd0ad30c17a0110c6c52024

  • SSDEEP

    6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+8:2uWP/BZUyoLu8Agsmxwrvejkd2

  Score

  10^/10

  rhadamanthysdiscoverystealer

  • Detect rhadamanthys stealer shellcode

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Rhadamanthys family

    rhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2