General
- Target 2026-06-29_ec3d1d6142764bf57db0568477caa645_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop
- Size 728KB
- Sample260630-b66tsscs2s
- SHA256 1e0ec301c52dfb8c3d13f57188ac70b11dc244381a9a971a1d567a629256799c
- MD5 ec3d1d6142764bf57db0568477caa645
- SHA1 e4889774245c3080777524cb6025ad08b6d9ea84
- SHA512 c674256852597dffd1abf34004fc4cba54bd111ae6ee5db730577b86b0eeb3d4cd33bd97a25a2f0c33419014569c3b1dd7495da9798303bf39a061f33ddbbb7c
- SSDEEP 12288:H0h0DudXezE09Si/ckGHt6pshsPSGkYl2XIQCb+Lk1TWbPXQnAN5L:HgXe4i7ojhsP5Lgrk1TWb4AN5
- TLSH T1B3F402113A828471F35607718591EAD09ABEBD3A26E0D45FF7B8BD3A19B10C3467326F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_ec3d1d6142764bf57db0568477caa645_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_ec3d1d6142764bf57db0568477caa645_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_ec3d1d6142764bf57db0568477caa645_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop
- Size 728KB
- SHA256 1e0ec301c52dfb8c3d13f57188ac70b11dc244381a9a971a1d567a629256799c
- MD5 ec3d1d6142764bf57db0568477caa645
- SHA1 e4889774245c3080777524cb6025ad08b6d9ea84
- SHA512 c674256852597dffd1abf34004fc4cba54bd111ae6ee5db730577b86b0eeb3d4cd33bd97a25a2f0c33419014569c3b1dd7495da9798303bf39a061f33ddbbb7c
- SSDEEP 12288:H0h0DudXezE09Si/ckGHt6pshsPSGkYl2XIQCb+Lk1TWbPXQnAN5L:HgXe4i7ojhsP5Lgrk1TWb4AN5
- TLSH T1B3F402113A828471F35607718591EAD09ABEBD3A26E0D45FF7B8BD3A19B10C3467326F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.