General
- Target 2026-04-21_90c1540cfc6d2ae14459bc8cdd2c9c4b_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- Sample260421-l3j6qsfv21
- SHA256 7f8937c87b0a62c86bd7e48dc1a34a228fde59332efc212e2f60777550e7e3a5
- MD5 90c1540cfc6d2ae14459bc8cdd2c9c4b
- SHA1 7292ac8dc01764d9ea310bddd342058c340d69a3
- SHA512 1c244bf30534185a28c0a1ee9371e4c0667aee0f1eb1ef9cebe5357a6e10eba8dcc8f7730bb86119bfe6a3a5fe19de7697e7e1fade435b064c583dd93d06a6dd
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mhth:jvSMxzKuN0m9G36xN9G36xttgh
- TLSH T114B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-21_90c1540cfc6d2ae14459bc8cdd2c9c4b_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-21_90c1540cfc6d2ae14459bc8cdd2c9c4b_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-21_90c1540cfc6d2ae14459bc8cdd2c9c4b_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- SHA256 7f8937c87b0a62c86bd7e48dc1a34a228fde59332efc212e2f60777550e7e3a5
- MD5 90c1540cfc6d2ae14459bc8cdd2c9c4b
- SHA1 7292ac8dc01764d9ea310bddd342058c340d69a3
- SHA512 1c244bf30534185a28c0a1ee9371e4c0667aee0f1eb1ef9cebe5357a6e10eba8dcc8f7730bb86119bfe6a3a5fe19de7697e7e1fade435b064c583dd93d06a6dd
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mhth:jvSMxzKuN0m9G36xN9G36xttgh
- TLSH T114B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Gepys trojan
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Loads dropped DLL