2026-06-30_c79275ac0b5bea88a9b20d1a8edc7988_elex_manuscrypt_rhadamanthys_silence_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-30_c79275ac0b5bea88a9b20d1a8edc7988_elex_manuscrypt_rhadamanthys_silence_stealc_stop
Size 224KB
Sample260701-dcqa3ac15j
SHA256 abe5eaf73172d248ac263391f2a7f86de0ba10277b18d9b7e4a8df2f91be803a
MD5 c79275ac0b5bea88a9b20d1a8edc7988
SHA1 a1823430285a78df91aa5c5b763a20e4c28f2159
SHA512 9c32abbef70fb80a3539847b2503e0a92ece7f7cc53715ed3bf8aedcc60a4f73ccdd039a4c46b7c5a7c9c39c22d220b2f057a04c66cfff5b145992e05bc175da
SSDEEP 3072:nZfnxegcbEz1sWn+4dmpYexanmX7+kcWQyZwE5GJRUfHY:pYbbnW+9ieomLBfZdIJRcH
TLSH
T1C4245910B981C072D6B3027106F8CBB2597DBD724B76A9CFA7D40B9D0A745D2AB31B63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-30_c79275ac0b5bea88a9b20d1a8edc7988_elex_manuscrypt_rhadamanthys_silence_stealc_stop

File Explorer

2026-06-30_c79275ac0b5bea88a9b20d1a8edc7988_elex_manuscrypt_rhadamanthys_silence_stealc_stop

.exe 224KB

2026-06-30_c79275ac0b5bea88a9b20d1a8edc7988_elex_manuscrypt_rhadamanthys_silence_stealc_stop

IMPHASH b2897279794e8cf81fbc0ba2986eced7
SHA256 abe5eaf73172d248ac263391f2a7f86de0ba10277b18d9b7e4a8df2f91be803a
MD5 c79275ac0b5bea88a9b20d1a8edc7988
SHA1 a1823430285a78df91aa5c5b763a20e4c28f2159
SHA512 9c32abbef70fb80a3539847b2503e0a92ece7f7cc53715ed3bf8aedcc60a4f73ccdd039a4c46b7c5a7c9c39c22d220b2f057a04c66cfff5b145992e05bc175da
SSDEEP 3072:nZfnxegcbEz1sWn+4dmpYexanmX7+kcWQyZwE5GJRUfHY:pYbbnW+9ieomLBfZdIJRcH
TLSH
T1C4245910B981C072D6B3027106F8CBB2597DBD724B76A9CFA7D40B9D0A745D2AB31B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

55799

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileA FindNextFileA EnterCriticalSection LeaveCriticalSection DeleteFileA CreateMutexA GetLastError CloseHandle Sleep CreateDirectoryA WaitForSingleObject TerminateThread GetTickCount CreateFileA WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount SetFileAttributesA ExitProcess SetLastError CreateProcessA CreateToolhelp32Snapshot Process32First Process32Next OpenProcess TerminateProcess IsWow64Process GetCurrentProcess InterlockedDecrement WideCharToMultiByte SetEndOfFile CreateFileW SetEnvironmentVariableA ReadConsoleW WriteConsoleW SetStdHandle LoadLibraryW OutputDebugStringW SetFilePointer HeapReAlloc GetOEMCP IsValidCodePage GetACP FreeEnvironmentStringsW GetEnvironmentStringsW GetCurrentProcessId QueryPerformanceCounter FlushFileBuffers SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP GetFileType GetProcessHeap InterlockedIncrement EncodePointer DecodePointer DeleteCriticalSection MultiByteToWideChar GetStringTypeW lstrlenA LocalFree HeapFree CreateThread GetCurrentThreadId ExitThread GetProcAddress LoadLibraryExW GetSystemTimeAsFileTime IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind HeapAlloc GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle GetModuleFileNameW GetModuleHandleExW AreFileApisANSI HeapSize

user32

GetForegroundWindow GetShellWindow GetWindowRect GetCursorPos GetSystemMetrics GetDesktopWindow

ole32

CoInitializeSecurity CoCreateInstance CoUninitialize CoSetProxyBlanket CoInitializeEx

oleaut32

SysAllocString SysFreeString VariantClear

ws2_32

send closesocket WSACleanup connect htons gethostbyname socket WSAStartup recv WSAGetLastError

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-30_c79275ac0b5bea88a9b20d1a8edc7988_elex_manuscrypt_rhadamanthys_silence_stealc_stop

kernel32

user32

ole32

oleaut32

ws2_32

generic