General
- Target 2026-06-03_d18286e4bea489b7fe8d7dc065b25836_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- Sample260603-25rxcsft9w
- SHA256 e4b3ceff9b17150e09d1023581ea3f6470e5f74bf5c3d6181a0b2369f9139a2c
- MD5 d18286e4bea489b7fe8d7dc065b25836
- SHA1 72990e36401552be2ce4b103a0b1925ff943f880
- SHA512 b429e79e79cb2bad98f6ca66e31340a82250d4aabc4815e04dd0f27b2120048d81abffa13ae638928495d96aa2c97b8f9b705c7783f9b2c0b906fcba3f35c7cb
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mhtu:jvSMxzKuN0m9G36xN9G36xttgu
- TLSH T1A0B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-03_d18286e4bea489b7fe8d7dc065b25836_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-03_d18286e4bea489b7fe8d7dc065b25836_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-03_d18286e4bea489b7fe8d7dc065b25836_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- SHA256 e4b3ceff9b17150e09d1023581ea3f6470e5f74bf5c3d6181a0b2369f9139a2c
- MD5 d18286e4bea489b7fe8d7dc065b25836
- SHA1 72990e36401552be2ce4b103a0b1925ff943f880
- SHA512 b429e79e79cb2bad98f6ca66e31340a82250d4aabc4815e04dd0f27b2120048d81abffa13ae638928495d96aa2c97b8f9b705c7783f9b2c0b906fcba3f35c7cb
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mhtu:jvSMxzKuN0m9G36xN9G36xttgu
- TLSH T1A0B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Gepys trojan
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Loads dropped DLL