2026-05-22_80c1555c95a24cb84ab127f2fcfb7461_manuscrypt_rhadamanthys_stop_vidar

General

Target
2026-05-22_80c1555c95a24cb84ab127f2fcfb7461_manuscrypt_rhadamanthys_stop_vidar
Size 1.4MB
Sample260522-schcsaey2n
SHA256 084a2a375b2b25f0172f494ac71fc708912abf909d9716896a694b8461c23858
MD5 80c1555c95a24cb84ab127f2fcfb7461
SHA1 429755e15d9b270291e2753a7906866cef20d84f
SHA512 ad31f66f1df879e1a4236daf031dc19bd2f1bfe5fbdde5e45ea4ff9f54591efd67cf90f5d7f055f31362850f70e82e31438f0244e6a043c5d76658256bc3de7a
SSDEEP 24576:/1flT/g6mDtaLg/DRZhf0deU/N9M+ugdM4WC6wK3Mu2E1H35DMw2n/qIjtAT3G4b:/nT3mDta4F35DMnCIjtAygHDp
TLSH
T141655D116AD093FEDD720231C995A1B1E679BE624721F2DB728C7A1E1F72DC06A37312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-22_80c1555c95a24cb84ab127f2fcfb7461_manuscrypt_rhadamanthys_stop_vidar

File Explorer

2026-05-22_80c1555c95a24cb84ab127f2fcfb7461_manuscrypt_rhadamanthys_stop_vidar

.exe 1.4MB

2026-05-22_80c1555c95a24cb84ab127f2fcfb7461_manuscrypt_rhadamanthys_stop_vidar

SHA256 084a2a375b2b25f0172f494ac71fc708912abf909d9716896a694b8461c23858
MD5 80c1555c95a24cb84ab127f2fcfb7461
SHA1 429755e15d9b270291e2753a7906866cef20d84f
SHA512 ad31f66f1df879e1a4236daf031dc19bd2f1bfe5fbdde5e45ea4ff9f54591efd67cf90f5d7f055f31362850f70e82e31438f0244e6a043c5d76658256bc3de7a
SSDEEP 24576:/1flT/g6mDtaLg/DRZhf0deU/N9M+ugdM4WC6wK3Mu2E1H35DMw2n/qIjtAT3G4b:/nT3mDta4F35DMnCIjtAygHDp
TLSH
T141655D116AD093FEDD720231C995A1B1E679BE624721F2DB728C7A1E1F72DC06A37312
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

117416

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

120KB

Virtual Size

119KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

700B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-22_80c1555c95a24cb84ab127f2fcfb7461_manuscrypt_rhadamanthys_stop_vidar

generic