General
-
Target
https://darknessonyx.com/ryos
-
Sample
250206-zh3n8syjcp
Score
10/10
Malware Config
Targets
-
-
Target
https://darknessonyx.com/ryos
Score10/10-
Detects Rhadamanthys payload
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Rhadamanthys family
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Enumerates processes with tasklist
-