General
- Target 2026-04-27_2155ba979b2101dd79ab92d3363a18ca_elex_karagany_manuscrypt_rhadamanthys_stop
- Size 13.2MB
- Sample260427-q1ycsscx81
- SHA256 f04ff7941724d9b94b473d3bb05c3ae7015508d9ececfe2d63695edbacad327f
- MD5 2155ba979b2101dd79ab92d3363a18ca
- SHA1 1b89f9ac0862610fece6f7c028e2095721294a09
- SHA512 ec681d0efa6f5936040703d546d87fcd8a29791c195f742beb470347e30c097acff0c676d16f17ae09a9b4808516fa255d9109ee509da5c01e5bfef0c08f750b
- SSDEEP 393216:pAgAgAgAgAgAgAgAgAgAgAgAgAgAgAbAgAgAgAgAgAgAgAgAgAgAgAgAgAgAfB:
- TLSH T1CDE6527BA61D16D5EC1CE07FE48D46A7673000B3D7A6307130E6DE2B404BAA48F9A67D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-27_2155ba979b2101dd79ab92d3363a18ca_elex_karagany_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260130-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-27_2155ba979b2101dd79ab92d3363a18ca_elex_karagany_manuscrypt_rhadamanthys_stop.exe
Resource
win11-20260130-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-27_2155ba979b2101dd79ab92d3363a18ca_elex_karagany_manuscrypt_rhadamanthys_stop
- Size 13.2MB
- SHA256 f04ff7941724d9b94b473d3bb05c3ae7015508d9ececfe2d63695edbacad327f
- MD5 2155ba979b2101dd79ab92d3363a18ca
- SHA1 1b89f9ac0862610fece6f7c028e2095721294a09
- SHA512 ec681d0efa6f5936040703d546d87fcd8a29791c195f742beb470347e30c097acff0c676d16f17ae09a9b4808516fa255d9109ee509da5c01e5bfef0c08f750b
- SSDEEP 393216:pAgAgAgAgAgAgAgAgAgAgAgAgAgAgAbAgAgAgAgAgAgAgAgAgAgAgAgAgAgAfB:
- TLSH T1CDE6527BA61D16D5EC1CE07FE48D46A7673000B3D7A6307130E6DE2B404BAA48F9A67D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1