3c30581e76de40e13ebeff98503c85b03e6c4ef7ca7509516372ac46818e780c

Analysis

max time kernel
149s
max time network
155s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 14:57

Target
2026-04-16_502ac3ee747b3034809f7d02df2586ce_amadey_elex_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
Size 3.0MB
Sample260416-sbmwwact2m
SHA256 3c30581e76de40e13ebeff98503c85b03e6c4ef7ca7509516372ac46818e780c
MD5 502ac3ee747b3034809f7d02df2586ce
SHA1 ee7f323470c2bb951aff91d6c8da44b642b82193
SHA512 b2451e9872cdf3654ed59a73406761da6ce74722167e3e6eb3678d0dec8b8fb2ef3216f4873692c712deabd3fc1fd596c35b6a335719b05757b986bcda8ff7af
SSDEEP 49152:T2agnToIiIBC55nakOElMaFLkj2RAR5FeA6wU73:9Rak7gu73
TLSH
T173E5490266909662D0AE017079E192379DE17DA10B2299DB3380FFAE5D37FE15FF1326
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1884	4436	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-16_502ac3ee747b3034809f7d02df2586ce_amadey_elex_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_502ac3ee747b3034809f7d02df2586ce_amadey_elex_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stealc_stop.exe"
1⤵
PID:4436
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4436 -s 8
  2⤵
  - Program crash
  PID:1884

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4436 -ip 4436
1⤵
PID:3076