Extracted

• • Target

    nitro.exe

  • Size

    448KB

  • MD5

    247e118fea545a3c2fe66e2f6cbb909e

  • SHA1

    9b3111d641b4d298c1929bb854fe625dce04a31e

  • SHA256

    fb60104722bd3e978deb9f646a66c645669b56976f3860422151936945104b0d

  • SHA512

    339d33716e0906b40ec99e959f364681af828d9e4c6756955ca20d4bd309ce534e77593d9e662fbf15b848f480dcd6ca73d94407499b067e1984d0070af96078

  • SSDEEP

    6144:5YD/SKiChZJwLEm/8hXOrPM90O0UkoGBnjCdbGeFhhYftgpN9J2Gox6KX2WIUvg3:iD/x91wiGM9YNnGFn/ym9md27XSgBaQ

  Score

  10^/10

  rhadamanthysdiscoverystealer

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Rhadamanthys family

    rhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Suspicious use of SetThreadContext

  behavioral1behavioral2