General
- Target 2026-07-05_bb2d429ece4131d8d9d68860b0077ef0_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop_swisyn
- Size 288KB
- Sample260705-nta8ksb16z
- SHA256 ffa466fd70ce41194b68d387da22e6ee2af2b77d7b0a1fa3ad155968f9477612
- MD5 bb2d429ece4131d8d9d68860b0077ef0
- SHA1 d51bbfea76cd49d3084e1e4acb8f90f5f8a158d9
- SHA512 cc705c6193ca1c034dd08cbc14b06761f2224d0643db8039f7be587365da034f349960594d0d3fe47af57231bf369f504df8d9477e606d65d8b6dd18b720b6c1
- SSDEEP 6144:XsLqdufVUNDaallllllllllllllllllllllllllllllllllllllllllllllllllQ:cFUNDaallllllllllllllllllllllll0
- TLSH T173545C227AC08437C95245F12874DA9ABA75AE320FA0ADD3B3567B15AD713C3B5F130B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_bb2d429ece4131d8d9d68860b0077ef0_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_bb2d429ece4131d8d9d68860b0077ef0_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop_swisyn.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_bb2d429ece4131d8d9d68860b0077ef0_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop_swisyn
- Size 288KB
- SHA256 ffa466fd70ce41194b68d387da22e6ee2af2b77d7b0a1fa3ad155968f9477612
- MD5 bb2d429ece4131d8d9d68860b0077ef0
- SHA1 d51bbfea76cd49d3084e1e4acb8f90f5f8a158d9
- SHA512 cc705c6193ca1c034dd08cbc14b06761f2224d0643db8039f7be587365da034f349960594d0d3fe47af57231bf369f504df8d9477e606d65d8b6dd18b720b6c1
- SSDEEP 6144:XsLqdufVUNDaallllllllllllllllllllllllllllllllllllllllllllllllllQ:cFUNDaallllllllllllllllllllllll0
- TLSH T173545C227AC08437C95245F12874DA9ABA75AE320FA0ADD3B3567B15AD713C3B5F130B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory