Extracted

• • Target

    R2SupportSolutionsFramework-13.0.1.131(1).exe

  • Size

    16.6MB

  • MD5

    3e8009d0ab1c75035523cdb7632f913b

  • SHA1

    f4ebded71378e672b114e0e0874323f0fae324a1

  • SHA256

    a49ff3f86cb550b5f020bad1cda41939ae989f78981bf9db0195cc7c610c352b

  • SHA512

    b2f98ece5cec805aadaa7be0138f87fbb417437b93356cd3afbcc88fc4adcb6890fa2bc3305fc4283394f64d071a9abf9b2e0e3f25bd8fec70e84905d20e4fdf

  • SSDEEP

    393216:MEOOzazpkWpMPISQ5SbP1Yxr1ZImPru+NT/BeDfu2+l8:MpVkWpMPrQ07wumP5UP+l8

  Score

  10^/10

  rhadamanthysdiscoverystealer

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Rhadamanthys family

    rhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  behavioral1behavioral2