General
- Target 2026-07-02_d758a1e3f4dac168e53a7133b5a3afcb_elex_karagany_manuscrypt_rhadamanthys_stop
- Size 702KB
- Sample260702-p1dsqaav7w
- SHA256 a58d37ee5c12e3067962e6723890c188b52317688d830195763db3cee10b0b3c
- MD5 d758a1e3f4dac168e53a7133b5a3afcb
- SHA1 0dd2218fe4bbbd663a6ce0545337efc600678115
- SHA512 4604597184e88a55c0b9afad062a9a2316cee30afaded10a2202a033633214361224db3281ac4f69baeba5f0df2563f31303e78f14ba1dfc19a63a5bce69090c
- SSDEEP 12288:AnbcDwz1Hf783Cv+jhHUtxW5uqdyjyxUA7Sz2Ue5NLH5A18zRKJLZmX1:AnDzFf78yv6h0nUou7kPcNrRkLZmX1
- TLSH T107E40102F9C080F5D4E679328CB959110ABAFE6755E5EA4B22C43B423833D51D729AFF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_d758a1e3f4dac168e53a7133b5a3afcb_elex_karagany_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_d758a1e3f4dac168e53a7133b5a3afcb_elex_karagany_manuscrypt_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_d758a1e3f4dac168e53a7133b5a3afcb_elex_karagany_manuscrypt_rhadamanthys_stop
- Size 702KB
- SHA256 a58d37ee5c12e3067962e6723890c188b52317688d830195763db3cee10b0b3c
- MD5 d758a1e3f4dac168e53a7133b5a3afcb
- SHA1 0dd2218fe4bbbd663a6ce0545337efc600678115
- SHA512 4604597184e88a55c0b9afad062a9a2316cee30afaded10a2202a033633214361224db3281ac4f69baeba5f0df2563f31303e78f14ba1dfc19a63a5bce69090c
- SSDEEP 12288:AnbcDwz1Hf783Cv+jhHUtxW5uqdyjyxUA7Sz2Ue5NLH5A18zRKJLZmX1:AnDzFf78yv6h0nUou7kPcNrRkLZmX1
- TLSH T107E40102F9C080F5D4E679328CB959110ABAFE6755E5EA4B22C43B423833D51D729AFF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.