General
- Target 2026-06-05_cf13cffe8ffb96c8197d94f431576b6f_elex_manuscrypt_phorpiex_rhadamanthys_stop
- Size 112KB
- Sample260605-txhdysct6p
- SHA256 cfecdee32698d19eef6bb2d49afedeecbcdaee89424f94e5e67e509760d42615
- MD5 cf13cffe8ffb96c8197d94f431576b6f
- SHA1 c1411e9928f499a410d7fa6ea457dfc9b84c1585
- SHA512 5966ee630680b1a5f3cdc11817e370c82483132e8339a26620030df9160d8e6b891e4dffda4fb74c5a7d5d9f7cca8ac9e1da3e4bb94b73e81868c0dfd8f62055
- SSDEEP 1536:5jKtSmJd7d52Dr59gzmkVa8S9rL2sFTfEcvSn0Mv3fx/h5Km26E8Yj29:ZKtS2d6oS8S1LFTfHm3fx/h5Kmuzj0
- TLSH T1DBB38E1030C1C432E566117988AAC7B98A6EF8710F756BD7FFC406AD8F366D19A36387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-05_cf13cffe8ffb96c8197d94f431576b6f_elex_manuscrypt_phorpiex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-05_cf13cffe8ffb96c8197d94f431576b6f_elex_manuscrypt_phorpiex_rhadamanthys_stop.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-05_cf13cffe8ffb96c8197d94f431576b6f_elex_manuscrypt_phorpiex_rhadamanthys_stop
- Size 112KB
- SHA256 cfecdee32698d19eef6bb2d49afedeecbcdaee89424f94e5e67e509760d42615
- MD5 cf13cffe8ffb96c8197d94f431576b6f
- SHA1 c1411e9928f499a410d7fa6ea457dfc9b84c1585
- SHA512 5966ee630680b1a5f3cdc11817e370c82483132e8339a26620030df9160d8e6b891e4dffda4fb74c5a7d5d9f7cca8ac9e1da3e4bb94b73e81868c0dfd8f62055
- SSDEEP 1536:5jKtSmJd7d52Dr59gzmkVa8S9rL2sFTfEcvSn0Mv3fx/h5Km26E8Yj29:ZKtS2d6oS8S1LFTfHm3fx/h5Kmuzj0
- TLSH T1DBB38E1030C1C432E566117988AAC7B98A6EF8710F756BD7FFC406AD8F366D19A36387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.