Overview

overview

9

Static

static

9

2025-03-21...ys.exe

windows7-x64

7

2025-03-21...ys.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    98s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/03/2025, 09:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys.exe

  • Size

    152.0MB

  • MD5

    2001f6e9b123be1252bb2245fbef7d27

  • SHA1

    f8d315a614d988acda9593859dffe0f0aae98863

  • SHA256

    051053512d2ea0296c02313b2c37a25fdaecf88e8ead1b8bd2b27bef6b9dea45

  • SHA512

    3522861051ccac2e8b4bdebe099f8dc7e912d8356032f5a1f32b2f482ac41100e4ac1efa6c833ea3421a64c449d628f4a00054057c903782c80c0aa9bda792d9

  • SSDEEP

    1572864:K2KvnNZb6N4HLmbrLQCJGSsutlfvWDXrxEJl0L/zb:K9vf+AmQC8Szdqr6CLf

Score
7/10
discovery

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL 58 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys.exe
    "C:\Users\Admin\AppData\Local\Temp\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys.exe"
    1⤵
    • Checks computer location settings
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:3148

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\Accessibility.dll
    Filesize

    20KB

    MD5

    b2848fb95c0dfb24a314b6be187ec192

    SHA1

    051e2b08724d0e8d2ddc4d11224aaa0596a8cd40

    SHA256

    7cd596521697a9c4ca911ec5d3ac8479ac273f31e53b4b814a41ee58accf81c7

    SHA512

    7cd520544f4b1b0925aa3d152ad2e0eb142368c3d2d4d63ace8ec90e138c94d2ea004f3e127095edb585131cfc3296b7f74dd75acd5dbc2e9f55d79574eb9369

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\ArdysaModsTools.dll
    Filesize

    1.9MB

    MD5

    e1aa78cd2c8963632f78254827d19b33

    SHA1

    ee3958743052cc5f7d267827991c528323e269de

    SHA256

    f8eaab7d07c95092b6c1cebcd62b0325f0804b65ab0e16f8f4932558a9bc17f6

    SHA512

    de06b74fbb69f76ce53d19df58f5479de08f53f6863c69c76e913b454e2f00bdc93fda48e61ace1587238811cf1cb8beeeea6bc5e6251d761df97c0bc539fc02

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\Microsoft.Win32.Primitives.dll
    Filesize

    15KB

    MD5

    294b806182cb8085cb9efd89ce8964c3

    SHA1

    f689a0ca3c96a057f5609005abf09f50d33a2eba

    SHA256

    b2487d785ff19b7127e9ff7325b2aadf1847116942bafe4b2a7ac8ec4e5ffca0

    SHA512

    b2545816c69b3bd39983de3e4413229f5b0cb6209e1905d60878527c152352972f31c2857a3348798141fd08598ad66f1f6140cfb291c0248282185d5d6a9b82

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\Microsoft.Win32.SystemEvents.dll
    Filesize

    90KB

    MD5

    fb6d471ccda24ce01e94b6d1c2037535

    SHA1

    4d164dc2dbb0d92183a5ee686b6d36155d9590ca

    SHA256

    d12720a08d7ef5fce453da0230d7ef331e67242235eabd7130aa4eee2ec7c78c

    SHA512

    0c353673eec5c8116b4c408d4278b82b69c6427765c1131a482295dc7c1a251a8b617b79471a25886c9ffa439f560151733d97ba5e39a3c668a58e7083db5a38

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Collections.Concurrent.dll
    Filesize

    246KB

    MD5

    7ad024326873c9f9b836f328d2772181

    SHA1

    9cdabef1c0b61b2d8abc49842ec208a9399afbe4

    SHA256

    b1c5ed4c24c6906c1210a946a7e16eb8a952f71ab02f07a9661e1a9d73dbba66

    SHA512

    169a54e6e338491b145080d047dcb34867abf55b4093272440e5b4084cc97a67daab5034883ef92aed978472d17134b8b61f1553df77261a637b4ed59291c921

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Collections.NonGeneric.dll
    Filesize

    90KB

    MD5

    63751be49265da08c5cc31d69561cf35

    SHA1

    41bad45fe5e880922ccb4a92ed24e1efe7ff002d

    SHA256

    f186e0ba826db3872212bb64efd52b3b931cbb3884d5968555c2db97ca0af242

    SHA512

    b373e996d3b2eca5a7af2b56ceb8d7108ec75753f7a39e5e0858aa8e8517bf1e649cae90d80734e4c892f658b05007897ab213c00e77e52329424d745941092d

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Collections.Specialized.dll
    Filesize

    90KB

    MD5

    bed614789fc47a835d0cff48bfbd37b4

    SHA1

    cbdb4930a704d17041bf596c3b0f0e3b4c275206

    SHA256

    e418cc7b24263168de6110fcb4ee317d5954528ea68a914f6d2e4f4169314f96

    SHA512

    763c024e4ba028f1330da84bd18c039d3f7c372a0968995cc2a4178892f6f4e812e6eac7f1ad687be4bc30655998053a198805483b611f2297d987c6a57c8b22

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Collections.dll
    Filesize

    234KB

    MD5

    296a096a6efd57adf0db713c3b3f9bcd

    SHA1

    cfd6668f663ee94c6af384dee1543a61d904705b

    SHA256

    ee1d94fbf9625e32a8c35e500aa96f503de9e20c909b7b6fa745d90b75375186

    SHA512

    d2cbbfdb111401fbca6731eb0b35b06b34f746515cd80289206efd88caa2329d5807410f02031dbf3285c70ed617afdf3a432223f0aeda1c522df603211fd890

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.ComponentModel.EventBasedAsync.dll
    Filesize

    46KB

    MD5

    89acdc62ecd8578021a48fe4a5c8e68c

    SHA1

    ca71520bbf321dded4a32ea2d3dd57bafd59abcd

    SHA256

    fd9abb2f9c0253348d90bb37dbccf10ed919ee74965c519aec4288a801b5e395

    SHA512

    017fe9e5fe200dfa2ca71c4dce2a34c5a968505fc0dc6d8c74c4d505d46795ca7c6eb0822ba6877358891b69956e6814e3bdd05623163742339d5c7df55a36eb

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.ComponentModel.Primitives.dll
    Filesize

    74KB

    MD5

    64c353b7fc024f5c9b70a40b5d3b9a82

    SHA1

    a611f5b431965ebc94c7be8f955864726cb15d38

    SHA256

    e4c7b77ba18e6055c89897d6bea04b29b595f5e7ad07fe4b6909f71bd93897b1

    SHA512

    bd4da2bd683415e725beafae84e271931629b950cd84c7b58e9e6f67fe51a650756a7b9a53deec8b64ec3970463f44acea5f23f3ab0d6044ea84ddee192ea1e3

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.ComponentModel.TypeConverter.dll
    Filesize

    670KB

    MD5

    c71e99ea1d7bd505bf52ec325a7d9025

    SHA1

    59d0858a5361769b167a3d396cf321480d0348fe

    SHA256

    154fc3b833730272afb7cacb76ad0e9e5e9572e720331cdf7e7ea008078a1a73

    SHA512

    1095ce2177ff0c4036ac89789db7a3fb4b9bde99c35c3abba6a5bfc0ac74e97804e1ec9fc041612e3d10695de2556bb2f9caf20a26d09b33ac0f542c57b6588e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.ComponentModel.dll
    Filesize

    30KB

    MD5

    c5070b3af15cec9ce8367674a7ef423b

    SHA1

    fbc67bc5992e5311c29a70843beaf450ee06d779

    SHA256

    20c41404f8e66b0fc1ccdca0e206a15db4bd2bb20e1627851cb270f0cda11213

    SHA512

    7093270019c3cdb770ebcb16a434239f55ca4c4e5fe94a67d24e9ad99a23f555d1f229a9c2aeb4d61647cae15159b111af067c571b3e1d091637467acd9c0bdd

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Diagnostics.DiagnosticSource.dll
    Filesize

    374KB

    MD5

    e9a69dfebd17e648930d23019903e106

    SHA1

    9f8902deca1f783b2a74eb8c7f498e9d31f188a0

    SHA256

    851d17a99941f42c719d1dd2af19335d80b272f410aa33281463d122c0525cc8

    SHA512

    7f094c3a9adf87a52c8a9dfa4ff49c86b77113073a505dcc66919001fedf8f1a0b22d93e68161f09da1b83520ee392c200a07731e71beb38cc2cfccf9dfc4412

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Diagnostics.FileVersionInfo.dll
    Filesize

    46KB

    MD5

    4d8dd70710d9a1200683937305c62848

    SHA1

    ad0b83c4540a8744fb16648e8b38dc48a0348a43

    SHA256

    f459d87243205f80c71492423dfefa72c0d13aa434c6f33bb93a7a50e74c9ca6

    SHA512

    5b605eafd3d999a1efb210fb11329069b9488145886d43162f16f8f78ff20f77c086f92d05299f60db28fbc56e8c2e6a34bb8a53feabbb0d2aceaafd8365c6ff

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Diagnostics.TraceSource.dll
    Filesize

    126KB

    MD5

    791beee82fa5d53554f5af2be2e890db

    SHA1

    6980eecfab36004f93af1081964a35a54a441703

    SHA256

    36a76b98667b1fcf8f80956e98f8775449f5e8e011760844967a61ee04db5053

    SHA512

    d969411ba75f9a28381aa973fbdc6ad464ded10f555de198d0eebd71ea806bb692d78d2271de2ecb9bd6978d88126841dec4ec3b32035e1a15dbe76698392482

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Diagnostics.Tracing.dll
    Filesize

    16KB

    MD5

    902d64bf625069dd8c5cbd03ad1e9a08

    SHA1

    1c095f11c9249a413175d751993fb1c61b914953

    SHA256

    21b7fde4f7482bc45e601cf9e5854ceac4d58eeff41f1f6e3c9f63c4d25b1d9d

    SHA512

    eac6e28dafc99745bc7b0376ac4a02f2c14b91207e97c85edf0747983746bfa90e9d30f90003c8411fbeb4d9ee09ae6dc793a32797f5370276717462e4d69a87

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Drawing.Common.dll
    Filesize

    1.3MB

    MD5

    efce0817fdaa08bbe22ee40cf1fa5af5

    SHA1

    35b21d11d58d540be7f4d6c9f9abe132f095c97f

    SHA256

    cdca350e985ae084e70344535bb3d728311ed1591dc26076552e2afbb54a72ee

    SHA512

    eff83a477c67c3294d94eca9ab4aadf0929e47a1ceaaa5cd215111368b07fa24767171e0237317e36fb3f36c7c2fec803bd2538732ec76a03b11eed273525bc5

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Drawing.Primitives.dll
    Filesize

    126KB

    MD5

    312f8236f93c49181bf7dd1c80b0ffcd

    SHA1

    251ac987371044e220df46014e69751e1a350347

    SHA256

    d314e27e5472cfb8097914b66fab26f1c7811eabcab1f0336bf24382cb4dfa9c

    SHA512

    dcc11172d313856666f944ae1ab4d689b8877cb4f3dcbf3ed9beefda3cf004c998d2c26b9452ea13067b634d9d2ebfaeb383d2efec952b0b956aa7db37412a96

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Drawing.dll
    Filesize

    21KB

    MD5

    78d3cd9395ae0b960e33d4c3b3c1196e

    SHA1

    e312e4ba15ab814f7a3f58c4134372766b1f75b6

    SHA256

    d5cbf48e9e890d9b7099c4685cfb3ce8e50cff3ebc0f794cabbb257e5feb1420

    SHA512

    48c57a37ac37553234def8ad04e642beb893d0f786f653cbd7975f9f968f0d0b28d9261397f0a812fbd5009365cf7a091323f3420b0feacd93589e6169c1ad1c

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.IO.Compression.dll
    Filesize

    238KB

    MD5

    f89059231d7f29943d08097e2bf6c52f

    SHA1

    5850ffbb804f3f02459b9d0728bd72e1de60e458

    SHA256

    695a50f5b93a288d57abda6bdff30e731d81d0121f579f5ec9f99b31fc907e3e

    SHA512

    77de005a696a085ba3021e1cbd7a478ac7e087b89ca2ed489910cad04650e5c4630496d16f634c181f6a762343d9229cb9e868ea7c30e12e678b6453ece5a5dc

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Memory.dll
    Filesize

    142KB

    MD5

    6af21c5d8ea1d11450ee89b5ba02d22c

    SHA1

    f436b67e28251ce0eaa0bd5606fd86a95152d09d

    SHA256

    0aca588f9824809794d113afeba847ae17541d4c81e8e9b1faff2d661fd4a7c6

    SHA512

    5b98385dacc27cfbdbd33446ff31c208516223469d49fc77a0e4256bebf1a80b591fea92cce716d56554be15ec22e077cfa0ed9811172e951095d6dddd74481a

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Net.Http.dll
    Filesize

    1.5MB

    MD5

    bf23f6be8881ea632a004c5fce8e2aa9

    SHA1

    04d52fde6628fd247f44704b613453ce814535be

    SHA256

    105e56853263795313b3e2e1a1c8e3c39f56756c65f43d5568e54362f50d8092

    SHA512

    375181db8824b8bff80a8832bf05ccaa1c341119de37e8bbccfe0b9e9d5d516158683dac463611daced357ae8aadfde0cf8b69a5bfa658cd18f818037a183c68

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Net.NameResolution.dll
    Filesize

    98KB

    MD5

    042e2c1fb34785286b121b032610dfc3

    SHA1

    a16f1dd5e732e1fc40241d94eae4f4d470a20958

    SHA256

    140d4bf6d744ad3b62c011149fe84ca1b1502ce6423e100c2f3490f232a4205d

    SHA512

    9fd2ce3a1cd8d735248142fd4f0bf449d52370c16a376df0c8e1b8ccf03c8efa09a064f824107797fd43de081c9725641dc1c5059354940357ce0c7200dba4d0

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Net.Primitives.dll
    Filesize

    206KB

    MD5

    f6b0103edf3e3775fb3c6b64622e9567

    SHA1

    917eb709bbdfeb38e077762cba5fcd475b4d20ee

    SHA256

    f6e959beefdd6b3fd5a857df8ff010d71a33a54ba94f01dbe649724ea3287931

    SHA512

    d4c4fff502750423990dc96d2843a838ced746ead881b9a90b641cf3f7b3b79e228a7968de031fe640ef9627303f50d8be57a4dc9f0a025835f08d038e4eb551

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Net.Security.dll
    Filesize

    590KB

    MD5

    dac6a9e2df536647674b79500683f9cf

    SHA1

    594cdc2ba13ee90a097c39494530f546f5966737

    SHA256

    921c196094c5a0f8df9ad6c4ae2179cba0ddf8d02e3f3d8f35b55507f17f46cb

    SHA512

    2116a864914fb416b1f9cf23ebbbfe50343fa6f2b4836624da9d04567256912f988e0f626b0cb6c5515fb79b8bc8cab026a57fe6590cff4b8d3400ec15d9182a

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Net.ServicePoint.dll
    Filesize

    42KB

    MD5

    23a19739c5d7ed9bbe8246ca8ce272b8

    SHA1

    688ca087b03193812f95dd23a0687b5993ee76e8

    SHA256

    378116fc44fc2fff5f7d600f13cfd83869800df4ab170f4422685f86e27f9a54

    SHA512

    8b355f4a78958f1b8c0435981b7978505def78b121e83d250ae4cc31a6ba67e741c6d44685c802c000cf968f967855513106f54de952c368a4d230cd7746ea04

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Net.Sockets.dll
    Filesize

    470KB

    MD5

    aad9471d6ead15d24dce5469def288d2

    SHA1

    2bcf500790749436165a8c166e676bf6ceef9059

    SHA256

    729f9c412b6c2c02f87ba7c8acb867f4c494364677a6af094b051b6556f04ea7

    SHA512

    64a2c89a87fc64448b75e0ce20af4ef5be06d51a40d374f569038643c6cb022cd95af76be6c267c4ba78728e5d7ab36bf8db7455a2ed8cd0addfd972685309fb

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Numerics.Vectors.dll
    Filesize

    15KB

    MD5

    fd63e0fa085eb10ac293b5a81fbb7726

    SHA1

    5d85006722e06505f57612ce72716b4cc944f1af

    SHA256

    a572a5f7d129a99c8d99ecb649f9ac378e068b4a0e59325e5c9ef141eea69ed4

    SHA512

    8b74043c2f55909f1c670d4c85a74efdfae27de6dc88c0d9c0e65e754aea61766c5f2134465b766915c6ce03f5686b4fedd7fae8018175d8d97ebbce4fa235fb

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.ObjectModel.dll
    Filesize

    70KB

    MD5

    9902767c39af8181c2b00c8ce90105b4

    SHA1

    a691d129945c49e0daff52460d51b86086e73f84

    SHA256

    f7a4e52cb29307ae49add1fbd9ca2fa7a2b5727f9b43badef483ffdc7ff451d0

    SHA512

    ac9d0efa6245b5b02a2074604cb025222aff4251696f10b3a8471bcfdf8aeae43de566828fe3bda1a706fa37638b1944ca3c71438ada0690d052362220d36f26

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Private.CoreLib.dll
    Filesize

    12.0MB

    MD5

    818c3d71b70abf00fce922795373dece

    SHA1

    e385cac055c135917a946bc13bec4855130fc270

    SHA256

    04187e39b74e9c6ea9e58ab430041e26011769ee6766c2e8c8a330519fda6ad3

    SHA512

    34c9a83058b7e592bdad715f20591668e76e9e847e3bf24818e5bacf5d4a2dbf653e3d4a36aa44991c6add135bb97680f405f5f76b1934847643768ff9e7f7c4

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Private.Uri.dll
    Filesize

    242KB

    MD5

    d8c36cb12422acdf706974c5b128badf

    SHA1

    8e25264f29ea85e980ed08acee4fb5715570b206

    SHA256

    53ec86e92539be123b5255158284e14711601d575a170ebb014e11887aa5fe82

    SHA512

    7157ad404ef9297b2a5c689146eb806d9545af539efbeda2439f6b384ea54c4c5e64d3e86ea95b3b564bae6386be4716533d3e942975dd980d4110e700c08b91

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Resources.Extensions.dll
    Filesize

    126KB

    MD5

    178c6427d88f501d01dfc1a3aa155896

    SHA1

    8a55fd837830373ba3600483638622b9b32996aa

    SHA256

    916884795709eb010d9d55c7f11365e5abc4452881c555af2a33777138c39aa6

    SHA512

    b2ad7180d2d466704e50e43e461001a10f320ccf5be64fd9e2d01edee2eff5a458ba6190c039f1f700906fb6fab3737cea88d166f22916b9a28544e4fb2addc4

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Runtime.InteropServices.dll
    Filesize

    86KB

    MD5

    36698d60de977a8ba8af128d237cc703

    SHA1

    f75b09fda0dfada578bf2a32f83c4c58fcfaf230

    SHA256

    92db5ddbdf5a23b61a146ddff0cb1f2187b5d6746da0eb6bac9004691c71749a

    SHA512

    bf625c82512fb7be3b7cbd88da3f959e230024de867ddfb49336afcae757ad005c1945307d6bd254a375bdf7b4adca08f20f977344e6973675528bf0813aca08

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Runtime.Intrinsics.dll
    Filesize

    16KB

    MD5

    4fef3f1e958b040fe5863b48130b8e52

    SHA1

    7c3d61c8b157d2ff9600f6b7dff536eafa857922

    SHA256

    fe1688b5fccb6daec023d450f3e358b36e1b996d3060cf1388d3c354413bad7c

    SHA512

    e5e3b228b4b2ffbe3a5c1d8f0e07d1b41b65bdf85eb1c43e63f60eb6dd61e03496686fb0a53f64cd82bb58532cabbe25e6847c87b4eaa5822ba356d4e976b2c7

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Runtime.dll
    Filesize

    42KB

    MD5

    8b8e3670dc1bbd3783d5343cb9115b80

    SHA1

    445e26aaa077c917067302cf4771f474b39b852b

    SHA256

    c6d4d63da0e5be8b3965cae72ef2ef292e6787994fe0164ff01c4f8b99dabde3

    SHA512

    61735c6e46cca530dc5dfb3c1eaea3b10b828abee6bb252b8c1c7d21cc8590cf13ac59fd0e9cb35e97ea0c802357e76b92a90af03d25a95a2f482aab15a557e2

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Security.Claims.dll
    Filesize

    90KB

    MD5

    3e817d0add1d5f49b042b98e948f9359

    SHA1

    7dfa813bafb7a48ddeb1893a007843beda963385

    SHA256

    d028f9b37b2ab9f35174c9cc08e7742a99f8cbbc5fe2f3765377c0e5326a981d

    SHA512

    8af827f30e13a152334025e9d929ec2079891bf9710b038f64ea8db2cc1e77c9c83681506a5c0f068df491295b18a1fba2c8d0c8295a6e9803e8496ca0922092

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Security.Cryptography.dll
    Filesize

    1.7MB

    MD5

    a74f41a1af9a38a36ee1e93a6d8abe40

    SHA1

    a6ff6226115effbc6f6c95c08ffeeb6c38f2a61f

    SHA256

    6e47870487675a3e1236e05d3d4f6913a9da8214049fbb7bb9f771f31a006aad

    SHA512

    021df903e18a005e271a570214434711599825ba660953b6a569b76555d7b6d13f5d730a25c7aeb29a8b645797521c7b100546677dda0363e9c9e078534bf343

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Security.Principal.Windows.dll
    Filesize

    162KB

    MD5

    e149526f8e03d49655f9bdf7ebf6e6d4

    SHA1

    6f03fce956f48ff89f0f1911c4db26a6c29c4541

    SHA256

    46e179b17198746f5abe1372883415f4b711217656c937ac9dadaa8e06816edc

    SHA512

    5cc991faa294e1c0c49ee59badcc20e9f2cb0981507b71d88834c9db8d56dc2c059f4476fa47f4aecfd67bd0d7feea2cca39525ec6d574b5eb09eaee27f0406a

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Text.Encoding.Extensions.dll
    Filesize

    15KB

    MD5

    4c9721059cbb419ba3aad1aeeb750e4a

    SHA1

    7634c26f548140381ecd4bdcbe5ea2df1c0c331d

    SHA256

    477fa342627adc499b4b10032f8d1d1d8505b82df56206fc1c3547d967b88216

    SHA512

    521e8dbcf74d866b8781f0c1cdf95956692f250a50d6c74b06702992133fe925eb8b1886a0593b9cfbe60ca54b1511bffa72c3145fe806696856386e5b2a0976

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Text.Json.dll
    Filesize

    1.3MB

    MD5

    445e9a748e9c99a570225a338847fdab

    SHA1

    117b33534115415870a1da4a8e7c34bb423e7ad8

    SHA256

    e6de929e9e84ab195558543ec4291a73442fb9a90d3388e65fcd75a4d3914eab

    SHA512

    71e549fa04632fd4de40db83a6ac1d53a32910d211dbe5d1517c25e24e590ba571cdabebc6359e3e49b5b2e58f9a85db691c09e17eda98e718decd96dd946623

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Threading.Overlapped.dll
    Filesize

    15KB

    MD5

    234cbe65440217074c3c8341dde78ef0

    SHA1

    3996e899bc99cc8a1148b5b5aa6833552d01b671

    SHA256

    02d8bbe9402e5c9764ead1b11747905b15ebf34e500deecde2feacfc9fcc0db6

    SHA512

    786a1f701ef914dabc96c77daf1b1a935716378cbfce00693a413dd57d9d717443de8ee4ce996878de9ac1bb02d9aee059a0fbf39d2261075b1cba2b6c49d947

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Threading.Thread.dll
    Filesize

    15KB

    MD5

    b05087d144701909bede90e61920e21d

    SHA1

    bcec8386471e74e6b98ec52d82b3cca26407f184

    SHA256

    89872d6521c717b42ee4b68714904bf17838c355172de671830e7f8ca2ebe14f

    SHA512

    c8db90c777e8e0a355bc713067eccb67d73d9cedefc1b072378b4622c25722b4a542cd2766b2d55bb837fdf65bd96d52384def5dd22bc8b990209839391c29cb

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Threading.ThreadPool.dll
    Filesize

    15KB

    MD5

    0cfc6170b67d1c9e53bc10e692f7047c

    SHA1

    c892ca0cf594bd5e0dd7c4b5cb888ff3825c7ef6

    SHA256

    0db1295b199b4113000132ab0a70bb8889f1471bf43ee3bde3aa69eae5081597

    SHA512

    8036bb2790136b3eea629f408fd4fc83e501e39e86e3a1d1211a7c0ef880c141a7fb6449a7982cc1033d02dfa9abd07f8e5401b76a163218e8f6284170f11b60

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Threading.dll
    Filesize

    78KB

    MD5

    371ca79acb2afc016463942090a534f3

    SHA1

    85177549d48f2fc72a65469a4fbcd09f1d4f7503

    SHA256

    6aed9d567b3e446a17f8516ada1ea26b212ac4cff99c623b32589e6a8b7c0b68

    SHA512

    18f728fb7e86643dbdaccbe7988922ed8d0302a2bc8fb9dc03f14415d14b3b50cd04eaf551c0852344bc5ef53607c60fc16d771cb68a853324d967dc49ca54d0

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Windows.Forms.Primitives.dll
    Filesize

    2.6MB

    MD5

    2f53aa129b895ba605980766a20b26c4

    SHA1

    4335a0babda0ffbb47a84280517a6159fdfbecb2

    SHA256

    8eeea3b0768b22581800ee5a7524b92f5d22ff4b43e26214c15e1bf0b6635adb

    SHA512

    02e59b44f1345d489faf1a262dc7bd4b80c0e1664936ab2c4cd8a31c49480b95e8b9822cec9499e784ec5b54309f8abcd4325c773dedef41c31ab84825c13f62

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\.net\2025-03-21_2001f6e9b123be1252bb2245fbef7d27_amadey_hijackloader_krakenkeylogger_luca-stealer_poet-rat_rhadamanthys\u4V9bxM5CJjcg9VZZTraoUi2FPChLBM=\System.Windows.Forms.dll
    Filesize

    12.2MB

    MD5

    ebebe561d8c749ab1725bfb071af2230

    SHA1

    8cf2741edc90f5896ba55f2fbfb5839fbd57e756

    SHA256

    cbd05a8f04d6c97a212a0f255ee6a4992c79c84034a8a15dd194bcf2e04dff9d

    SHA512

    93e126c6dfe430811452ef4fa1dd07f6a9fcdd8c81de7174611158e54c18197a637b02b85fe2acf7c317644d6191b466b396f86a09d2f7e0b2524bb29147d8fa

    Download Submit