General
- Target 2026-07-02_c7b3ea8207527127dd4f88dae3a54967_elex_karagany_manuscrypt_rhadamanthys_stop
- Size 702KB
- Sample260702-x9eelsh12k
- SHA256 2be59eb161373ee4055aca0c1a140a023537e2b0c3f10e99b432387d53525b25
- MD5 c7b3ea8207527127dd4f88dae3a54967
- SHA1 47d6efe37e5b05a38bda129dd54fc55312c58a90
- SHA512 104d448484401eaf4ae3a7e1d2569fddca4b164658a9deeb8e78d8eb21368a0fc80c049b3d258501966f429a58ae336b895fc57d977b81ac8940f318fda22341
- SSDEEP 12288:AnbcDwhxH4qOlsXL3w5My/KQ4rFWm5ntndx0niLvsntf+jXaoKJLZmX1:AnDzH4nGrsnO51tnH0QstmULZmX1
- TLSH T174E40242F4C080B0D4E66D328CBA96010A7BFD5795E5ED8B66C83B417833D519B29EBF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_c7b3ea8207527127dd4f88dae3a54967_elex_karagany_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_c7b3ea8207527127dd4f88dae3a54967_elex_karagany_manuscrypt_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_c7b3ea8207527127dd4f88dae3a54967_elex_karagany_manuscrypt_rhadamanthys_stop
- Size 702KB
- SHA256 2be59eb161373ee4055aca0c1a140a023537e2b0c3f10e99b432387d53525b25
- MD5 c7b3ea8207527127dd4f88dae3a54967
- SHA1 47d6efe37e5b05a38bda129dd54fc55312c58a90
- SHA512 104d448484401eaf4ae3a7e1d2569fddca4b164658a9deeb8e78d8eb21368a0fc80c049b3d258501966f429a58ae336b895fc57d977b81ac8940f318fda22341
- SSDEEP 12288:AnbcDwhxH4qOlsXL3w5My/KQ4rFWm5ntndx0niLvsntf+jXaoKJLZmX1:AnDzH4nGrsnO51tnH0QstmULZmX1
- TLSH T174E40242F4C080B0D4E66D328CBA96010A7BFD5795E5ED8B66C83B417833D519B29EBF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Deletes itself
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.