Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
28/05/2026, 15:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-28_91082df4cff5762c661c7e1aafeb8ef2_amadey_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_91082df4cff5762c661c7e1aafeb8ef2_amadey_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 2026-05-28_91082df4cff5762c661c7e1aafeb8ef2_amadey_elex_manuscrypt_rhadamanthys_stop.exe
- Size 2.4MB
- Sample260528-szwtpadt9k
- SHA256 7a2e02744c747910fe330014782ddbae43efa4cbbbf5e91569d30567ecc2a4a3
- MD5 91082df4cff5762c661c7e1aafeb8ef2
- SHA1 50ba82ea0aaf4a83fed592bfc56e7f6688d13b64
- SHA512 1d891074373b4adcfbdbfa7ac3ab61678c6bd4c82202864eff21735af4bb978af1cf80c3715533fea578ff00c36f0c2716d574db1968e57cb1c79c08dd6da62b
- SSDEEP 49152:Pv9M8c9IW1dXgfC/MHmgdeW4SkZP4sz9MbQxGUU7:H9zc9IW1dXgfC/MHmgBfkZcp
- TLSH T1DCC5F6C2B5E7CA27D0A290B5C5829A54B9313FC50725BA87E245BB5DEF3F2D0993C324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-05-28_91082df4cff5762c661c7e1aafeb8ef2_amadey_elex_manuscrypt_rhadamanthys_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-28_91082df4cff5762c661c7e1aafeb8ef2_amadey_elex_manuscrypt_rhadamanthys_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-28_91082df4cff5762c661c7e1aafeb8ef2_amadey_elex_manuscrypt_rhadamanthys_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:2512