General
- Target 2026-07-04_643d64f046eec0b9d548ab59e621b5f7_elex_karagany_manuscrypt_rhadamanthys_stop
- Size 702KB
- Sample260704-kffpcsds4x
- SHA256 48151e336bb0b654e94131e648eff3f28ac852b655c154ba1ab4e6d2fe642729
- MD5 643d64f046eec0b9d548ab59e621b5f7
- SHA1 38e3b53716b5e5e623e314bd0e3632b6695349d9
- SHA512 f93c3b92bfb10d83e017515a1eebfd3acef0f7e3224bf3ec2786275f64820940b61cb30f9c065e3cf4432bbe681fc6e3f7dfc05aa0e231dc0188ae4480befcea
- SSDEEP 12288:AnbcDw2W0h5ZsZ7ajnRfsj+RkI7YQQVex6lqV4dBrzKJLZmX1:AnDjU06RMMkkYQQox8k4jmLZmX1
- TLSH T1DFE4F142F8C040B1C4E16D364CB995510ABBFE6785E8E95B26C87B463833C51973AEFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_643d64f046eec0b9d548ab59e621b5f7_elex_karagany_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_643d64f046eec0b9d548ab59e621b5f7_elex_karagany_manuscrypt_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_643d64f046eec0b9d548ab59e621b5f7_elex_karagany_manuscrypt_rhadamanthys_stop
- Size 702KB
- SHA256 48151e336bb0b654e94131e648eff3f28ac852b655c154ba1ab4e6d2fe642729
- MD5 643d64f046eec0b9d548ab59e621b5f7
- SHA1 38e3b53716b5e5e623e314bd0e3632b6695349d9
- SHA512 f93c3b92bfb10d83e017515a1eebfd3acef0f7e3224bf3ec2786275f64820940b61cb30f9c065e3cf4432bbe681fc6e3f7dfc05aa0e231dc0188ae4480befcea
- SSDEEP 12288:AnbcDw2W0h5ZsZ7ajnRfsj+RkI7YQQVex6lqV4dBrzKJLZmX1:AnDjU06RMMkkYQQox8k4jmLZmX1
- TLSH T1DFE4F142F8C040B1C4E16D364CB995510ABBFE6785E8E95B26C87B463833C51973AEFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.