General
- Target 2026-04-08_c26055270f3c727d018e1848ab6d16f0_elex_manuscrypt_maze_njrat_rhadamanthys_stop
- Size 1.2MB
- Sample260408-e1ed5sgy8k
- SHA256 1f03dd4db5b7c81c32a77908f3ba149998509df8fe3f1780c269198ef045cfb0
- MD5 c26055270f3c727d018e1848ab6d16f0
- SHA1 02b7ee6c2f37ab07a4d1ce601581b1ca958e10ad
- SHA512 4cf1cb927a0fd4458803055008f00be21f5313e9cb322cdacab78661fce9a1ec247b6b30e617edea747081225f7b7cfbe1e88d71d7f8b2e60ff8437908f0042a
- SSDEEP 24576:3IwoFmXsR3sf1viW1V6T/uKWZUtH6z1oIxvOJFIw4W/:YuosfYWH6zuKd6z3xvOJFIw4q
- TLSH T18445BF0336947CE2C7255B706E5DA9DA7329B8637F41AB962500674F0CBB2E8DF47B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-08_c26055270f3c727d018e1848ab6d16f0_elex_manuscrypt_maze_njrat_rhadamanthys_stop.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-08_c26055270f3c727d018e1848ab6d16f0_elex_manuscrypt_maze_njrat_rhadamanthys_stop.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-08_c26055270f3c727d018e1848ab6d16f0_elex_manuscrypt_maze_njrat_rhadamanthys_stop
- Size 1.2MB
- SHA256 1f03dd4db5b7c81c32a77908f3ba149998509df8fe3f1780c269198ef045cfb0
- MD5 c26055270f3c727d018e1848ab6d16f0
- SHA1 02b7ee6c2f37ab07a4d1ce601581b1ca958e10ad
- SHA512 4cf1cb927a0fd4458803055008f00be21f5313e9cb322cdacab78661fce9a1ec247b6b30e617edea747081225f7b7cfbe1e88d71d7f8b2e60ff8437908f0042a
- SSDEEP 24576:3IwoFmXsR3sf1viW1V6T/uKWZUtH6z1oIxvOJFIw4W/:YuosfYWH6zuKd6z3xvOJFIw4q
- TLSH T18445BF0336947CE2C7255B706E5DA9DA7329B8637F41AB962500674F0CBB2E8DF47B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Risepro family
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1