2026-04-21_90c1540cfc6d2ae14459bc8cdd2c9c4b_elex_manuscrypt_rhadamanthys_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-21_90c1540cfc6d2ae14459bc8cdd2c9c4b_elex_manuscrypt_rhadamanthys_stop
Size 511KB
Sample260421-l3j6qsfv21
SHA256 7f8937c87b0a62c86bd7e48dc1a34a228fde59332efc212e2f60777550e7e3a5
MD5 90c1540cfc6d2ae14459bc8cdd2c9c4b
SHA1 7292ac8dc01764d9ea310bddd342058c340d69a3
SHA512 1c244bf30534185a28c0a1ee9371e4c0667aee0f1eb1ef9cebe5357a6e10eba8dcc8f7730bb86119bfe6a3a5fe19de7697e7e1fade435b064c583dd93d06a6dd
SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mhth:jvSMxzKuN0m9G36xN9G36xttgh
TLSH
T114B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-21_90c1540cfc6d2ae14459bc8cdd2c9c4b_elex_manuscrypt_rhadamanthys_stop

File Explorer

2026-04-21_90c1540cfc6d2ae14459bc8cdd2c9c4b_elex_manuscrypt_rhadamanthys_stop

.exe 511KB

2026-04-21_90c1540cfc6d2ae14459bc8cdd2c9c4b_elex_manuscrypt_rhadamanthys_stop

IMPHASH 021e88aa63bed63995eccbbbfe0f7cdf
SHA256 7f8937c87b0a62c86bd7e48dc1a34a228fde59332efc212e2f60777550e7e3a5
MD5 90c1540cfc6d2ae14459bc8cdd2c9c4b
SHA1 7292ac8dc01764d9ea310bddd342058c340d69a3
SHA512 1c244bf30534185a28c0a1ee9371e4c0667aee0f1eb1ef9cebe5357a6e10eba8dcc8f7730bb86119bfe6a3a5fe19de7697e7e1fade435b064c583dd93d06a6dd
SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mhth:jvSMxzKuN0m9G36xN9G36xttgh
TLSH
T114B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6224

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text

Size

39KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

172KB

Virtual Size

172KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

216B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata6

Size

1024B

Virtual Size

806B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata3

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata2

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

2026-04-21_90c1540cfc6d2ae14459bc8cdd2c9c4b_elex_manuscrypt_rhadamanthys_stop

kernel32

user32

advapi32

msvcrt

generic