General
- Target 2026-07-04_98c9bf8bf5b58447016a8fc6bb559aed_elex_karagany_mafia_manuscrypt_rhadamanthys_stop
- Size 521KB
- Sample260704-eqjacaez8p
- SHA256 9f37bd416c347cea4af7664ba8c42b90fde1ed5f2bd0f6ca014bba4771c7637e
- MD5 98c9bf8bf5b58447016a8fc6bb559aed
- SHA1 766bd02f355549d01ac578d4894890bf781ee8c0
- SHA512 045195dc5399645e79ee3e3b2fb32f408686f79d508804ad552e83d8afd4f15c57cba1bf74890cb3407212aabe0499bfed38a87adb7ab9ccf54f67e434981e63
- SSDEEP 12288:c/1Ba9pn+DUEV1G5HA6aACvRfra60KovNZi:c/C98DL4BA6a9a60KovNg
- TLSH T1BCB4F121B584C032E1A312314E52EBA1893BBC764B26A5D77BD03AAE1FB53D1E335357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_98c9bf8bf5b58447016a8fc6bb559aed_elex_karagany_mafia_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_98c9bf8bf5b58447016a8fc6bb559aed_elex_karagany_mafia_manuscrypt_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_98c9bf8bf5b58447016a8fc6bb559aed_elex_karagany_mafia_manuscrypt_rhadamanthys_stop
- Size 521KB
- SHA256 9f37bd416c347cea4af7664ba8c42b90fde1ed5f2bd0f6ca014bba4771c7637e
- MD5 98c9bf8bf5b58447016a8fc6bb559aed
- SHA1 766bd02f355549d01ac578d4894890bf781ee8c0
- SHA512 045195dc5399645e79ee3e3b2fb32f408686f79d508804ad552e83d8afd4f15c57cba1bf74890cb3407212aabe0499bfed38a87adb7ab9ccf54f67e434981e63
- SSDEEP 12288:c/1Ba9pn+DUEV1G5HA6aACvRfra60KovNZi:c/C98DL4BA6a9a60KovNg
- TLSH T1BCB4F121B584C032E1A312314E52EBA1893BBC764B26A5D77BD03AAE1FB53D1E335357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.