2026-07-06_136457157bd5af413ffa8d205e4908bb_elex_manuscrypt_rhadamanthys_silence_smoke-loader_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-06_136457157bd5af413ffa8d205e4908bb_elex_manuscrypt_rhadamanthys_silence_smoke-loader_stealc_stop
Size 224KB
Sample260706-2j9kaacz21
SHA256 625f12e1214b4c9626b0fdb72e60e3412ee15a50de082268c80fbe2e8bdf41bf
MD5 136457157bd5af413ffa8d205e4908bb
SHA1 61a1862e763e961f4cbb271755659fc65ad6d3e4
SHA512 e4c2bd7eaa2247d1196e91f4f0134d0384ebc0851a68f3770a35b4d51bfe85bc902010f8e2252f2c895884a8a5f97ae95f6b899a75d10d129e01cb6c37d18d7e
SSDEEP 3072:IAT90ZtoeMTDApmnirZRrxrt+Uwb53blC14RbR:IAT9ctoFDAMQZRrLz14Rd
TLSH
T1F8242A237D80A076E833833501E4F7B2562D7A2157A5F5DBBBACCE6D06721E37632252
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_136457157bd5af413ffa8d205e4908bb_elex_manuscrypt_rhadamanthys_silence_smoke-loader_stealc_stop

File Explorer

2026-07-06_136457157bd5af413ffa8d205e4908bb_elex_manuscrypt_rhadamanthys_silence_smoke-loader_stealc_stop

.exe 224KB

2026-07-06_136457157bd5af413ffa8d205e4908bb_elex_manuscrypt_rhadamanthys_silence_smoke-loader_stealc_stop

IMPHASH 83b4d9bc0c65c322eeb631d44fed51b2
SHA256 625f12e1214b4c9626b0fdb72e60e3412ee15a50de082268c80fbe2e8bdf41bf
MD5 136457157bd5af413ffa8d205e4908bb
SHA1 61a1862e763e961f4cbb271755659fc65ad6d3e4
SHA512 e4c2bd7eaa2247d1196e91f4f0134d0384ebc0851a68f3770a35b4d51bfe85bc902010f8e2252f2c895884a8a5f97ae95f6b899a75d10d129e01cb6c37d18d7e
SSDEEP 3072:IAT90ZtoeMTDApmnirZRrxrt+Uwb53blC14RbR:IAT9ctoFDAMQZRrLz14Rd
TLSH
T1F8242A237D80A076E833833501E4F7B2562D7A2157A5F5DBBBACCE6D06721E37632252
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42360

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LeaveCriticalSection CreateDirectoryA EnterCriticalSection DeleteFileA WaitForSingleObject Sleep TerminateProcess ExitProcess GetTickCount InitializeCriticalSectionAndSpinCount GetLastError SetFileAttributesA GetModuleFileNameA CreateMutexA DeleteCriticalSection CloseHandle CreateFileA WriteFile InterlockedDecrement GetCurrentProcess Process32First OpenProcess WideCharToMultiByte CreateProcessA SetLastError Process32Next CreateToolhelp32Snapshot SetEndOfFile CreateFileW SetEnvironmentVariableA LoadLibraryW OutputDebugStringW WriteConsoleW SetStdHandle ReadConsoleW HeapReAlloc GetOEMCP IsValidCodePage SetFilePointer GetACP FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetModuleFileNameW HeapSize GetConsoleMode GetConsoleCP FlushFileBuffers SetFilePointerEx ReadFile AreFileApisANSI GetModuleHandleExW GetProcessHeap GetFileType GetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW InterlockedIncrement EncodePointer DecodePointer MultiByteToWideChar GetStringTypeW lstrlenA LocalFree HeapFree CreateThread GetCurrentThreadId ExitThread GetProcAddress LoadLibraryExW IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind HeapAlloc GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW CompareStringW LCMapStringW

user32

GetCursorPos DispatchMessageA ShowWindow DefWindowProcA CreateWindowExA TranslateMessage PostQuitMessage RegisterClassExA GetMessageA UpdateWindow

ole32

CoSetProxyBlanket CoInitializeSecurity CoInitializeEx CoUninitialize CoCreateInstance

oleaut32

SysAllocString VariantClear SysFreeString

ws2_32

connect WSAStartup WSAGetLastError htons WSACleanup recv send gethostbyname closesocket socket

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_136457157bd5af413ffa8d205e4908bb_elex_manuscrypt_rhadamanthys_silence_smoke-loader_stealc_stop

kernel32

user32

ole32

oleaut32

ws2_32

generic