General
- Target 2026-07-01_567c85c73f49865702391d51ed820b03_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop
- Size 705KB
- Sample260701-lsdk7say8k
- SHA256 27139382bdaa3dbf2c10ed83604d2f628523466b9fa928cf31a460beff6b13d4
- MD5 567c85c73f49865702391d51ed820b03
- SHA1 479744b32e26e2d19951123ff87d5b92907448ad
- SHA512 e31f2ab77c777bc18abd79c923110cde5e8edf843e976a12ee60731e59fd5abcc21bd016dc5daddaf6f81419c9f6ac4233aea433933f39fd898b351a93409a52
- SSDEEP 12288:ChA+ZFc2ms8R+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpG7:C1ZoRyxknw4FYnshx8OfVe247
- TLSH T1EAE402287BC1C0B2C44A10720A35D7A6662DFE314F7591D3FB597B2EED705D0AA3A293
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_567c85c73f49865702391d51ed820b03_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_567c85c73f49865702391d51ed820b03_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop
- Size 705KB
- SHA256 27139382bdaa3dbf2c10ed83604d2f628523466b9fa928cf31a460beff6b13d4
- MD5 567c85c73f49865702391d51ed820b03
- SHA1 479744b32e26e2d19951123ff87d5b92907448ad
- SHA512 e31f2ab77c777bc18abd79c923110cde5e8edf843e976a12ee60731e59fd5abcc21bd016dc5daddaf6f81419c9f6ac4233aea433933f39fd898b351a93409a52
- SSDEEP 12288:ChA+ZFc2ms8R+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpG7:C1ZoRyxknw4FYnshx8OfVe247
- TLSH T1EAE402287BC1C0B2C44A10720A35D7A6662DFE314F7591D3FB597B2EED705D0AA3A293
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1