General
- Target 2026-04-19_bc91b8c981130dd0807802082e086e90_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- Sample260419-qa283abs6l
- SHA256 4986afb1497f7c71abe130502e742e2773d4f7ee6bba85e4c63ac5b8b480da9f
- MD5 bc91b8c981130dd0807802082e086e90
- SHA1 3b24b71332332cafed07991bcaa0aafbf6dd359d
- SHA512 89b1518e9323f95259d6a68972adebf08b7f13d518f6fb0ba3cd2c6ca404c03a4a1536265cc8961efca42a2bd8194989d96c75af4a4964e466d11c3e6b85a2b3
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mhto:jvSMxzKuN0m9G36xN9G36xttgo
- TLSH T114B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_bc91b8c981130dd0807802082e086e90_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_bc91b8c981130dd0807802082e086e90_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_bc91b8c981130dd0807802082e086e90_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- SHA256 4986afb1497f7c71abe130502e742e2773d4f7ee6bba85e4c63ac5b8b480da9f
- MD5 bc91b8c981130dd0807802082e086e90
- SHA1 3b24b71332332cafed07991bcaa0aafbf6dd359d
- SHA512 89b1518e9323f95259d6a68972adebf08b7f13d518f6fb0ba3cd2c6ca404c03a4a1536265cc8961efca42a2bd8194989d96c75af4a4964e466d11c3e6b85a2b3
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mhto:jvSMxzKuN0m9G36xN9G36xttgo
- TLSH T114B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Gepys trojan
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
Executes dropped EXE
Loads dropped DLL