General
- Target 2026-07-03_d9b5a8bc43ab64e632fe824c71f4bb60_amadey_elex_manuscrypt_rhadamanthys_stop
- Size 2.5MB
- Sample260703-3qlmgahs5z
- SHA256 d37e515b34125c606e9756a466c9a10470efdb9bda5a508727a1604dd2425f81
- MD5 d9b5a8bc43ab64e632fe824c71f4bb60
- SHA1 184d76c2746b45e04edd4a9a5f520138a1ba857c
- SHA512 94b4459e0138f0234b89d2613be63fe2c674b91196cdc265a444603236ce044b17c9432a83e14b4c51e2798e9ee3d142c077b2f1d386b95fc552c19a60d82c06
- SSDEEP 24576:X57c9IWdh0sDOU8JJNK/Ry5T7WUtLpwbtLpwV:Bc9IWcsDOTJJ8y5vbtL2tL
- TLSH T175C581C1A5D78427DC5D1E7085919A30F8216FDF7F2EB586EE00762A9B7F6C0A92C312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_d9b5a8bc43ab64e632fe824c71f4bb60_amadey_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_d9b5a8bc43ab64e632fe824c71f4bb60_amadey_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_d9b5a8bc43ab64e632fe824c71f4bb60_amadey_elex_manuscrypt_rhadamanthys_stop
- Size 2.5MB
- SHA256 d37e515b34125c606e9756a466c9a10470efdb9bda5a508727a1604dd2425f81
- MD5 d9b5a8bc43ab64e632fe824c71f4bb60
- SHA1 184d76c2746b45e04edd4a9a5f520138a1ba857c
- SHA512 94b4459e0138f0234b89d2613be63fe2c674b91196cdc265a444603236ce044b17c9432a83e14b4c51e2798e9ee3d142c077b2f1d386b95fc552c19a60d82c06
- SSDEEP 24576:X57c9IWdh0sDOU8JJNK/Ry5T7WUtLpwbtLpwV:Bc9IWcsDOTJJ8y5vbtL2tL
- TLSH T175C581C1A5D78427DC5D1E7085919A30F8216FDF7F2EB586EE00762A9B7F6C0A92C312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.