Extracted

• • Target
    2026-06-01_c216e56ee3cb6c89896174ee0b0ddce0_elex_manuscrypt_rhadamanthys_stop
  • Size 1.3MB
  • SHA256 02afff50013b50da7f661d62fe9edd903734f6e4104a2befbf1cdf3d11b5f03f
  • MD5 c216e56ee3cb6c89896174ee0b0ddce0
  • SHA1 3d8c63c0fc61be36aa8861c7a904367b2062371b
  • SHA512 576f5ad4071d4301eed9aaaacb4afe2744c6cf8ed0f5d17c8c8bd12484c7ac09b5d336bfa7f2ff6a3a58b69e5ef09241e3a4124b2c1b50722b288f3a5365816f
  • SSDEEP 12288:mpoq1+oj/YHFX7o3bqZbxhoqfmj6P3mljS:xqpj/g2rq1h/+83m
  • TLSH
    T13E55122232D0C472D86669308974D7F50F3DF8752AA4885B33A91B7ABF712F0573A297
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoverycryptbotspywarestealer

  • CryptBot payload

  • Family: CryptBot

    CryptBot is a C++ stealer distributed widely in bundle with other software.

    spywarestealercryptbot

  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers

  • Detects executables referencing many confidential data stores found in browsers, mail clients, crypt

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2