Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
19/05/2026, 14:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-19_3847aac138e3ed635cde2ec764769421_amadey_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-19_3847aac138e3ed635cde2ec764769421_amadey_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 2026-05-19_3847aac138e3ed635cde2ec764769421_amadey_elex_manuscrypt_rhadamanthys_stop.exe
- Size 2.1MB
- Sample260519-rezjeagy6m
- SHA256 7f2c8a8317bcbce46c8e5b8c7eb2e9d427b3ed231a813380ffb77784bd9416f1
- MD5 3847aac138e3ed635cde2ec764769421
- SHA1 eb75817bfcc3c762f67af604e1b40b92130ad303
- SHA512 a953618e734eaf24195c2cae0ec1aaf30abcab10a6c5ddc528b9c20357ce4a30aa4cc0c5f26dc617eb5744abe4f1857eaf27b62ec57505a161a3d7b91f1a9f89
- SSDEEP 24576:VZ96H0C4/izRXTOkMtrIceMaFPjkjD29eZe0p4Ek4niOkl/A04szE87JKTvmDd4f:0HdakOElMaFLkleW4SkZP4sz9MbkXp
- TLSH T172A53B12F6B88333D0B281B5C9967799FA323C111B3099DB5345B76C2D366F29E3532A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-05-19_3847aac138e3ed635cde2ec764769421_amadey_elex_manuscrypt_rhadamanthys_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-19_3847aac138e3ed635cde2ec764769421_amadey_elex_manuscrypt_rhadamanthys_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-19_3847aac138e3ed635cde2ec764769421_amadey_elex_manuscrypt_rhadamanthys_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1484