General
- Target 2026-07-07_1c1dc0fbf2239877b59c33a7736c6816_elex_manuscrypt_maze_rhadamanthys_stop
- Size 227KB
- Sample260707-3ma2kaf121
- SHA256 a2c16c091489580b47293fd7a6eec06525257eb631a3898f1e01b3f8b539387f
- MD5 1c1dc0fbf2239877b59c33a7736c6816
- SHA1 4c8d9f1711965be03979b0379e15a6a02dab4b38
- SHA512 7a737bdcfa72c1c26c178f46df8e55ed410fca43d448ffc0a859b23863a098cf6b7c6c15604df0930b33fe591851471912f7b8f0e2a6377026eff034750ea30c
- SSDEEP 3072:ejjuLPL6PpQ4i4iX+J9fYJ8q+m4qroPIvl61161a4kgiocFZacC5:ePuLmCDSmnMPINs6U4s65
- TLSH T10C349D0231D1F271D6770A3258B99E5547FEFCB51A70AA0733882B0F59312E0A766B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_1c1dc0fbf2239877b59c33a7736c6816_elex_manuscrypt_maze_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_1c1dc0fbf2239877b59c33a7736c6816_elex_manuscrypt_maze_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260706-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
https://oi2jidsdjsdd.info/
-
https://98iudjsandsas.info/
-
https://dksjdhsjda89j.info/
-
http://oi2jidsdjsdd.info/
-
http://98iudjsandsas.info/
-
http://dksjdhsjda89j.info/
rc4.i32
rc4.i32
Targets
-
- Target 2026-07-07_1c1dc0fbf2239877b59c33a7736c6816_elex_manuscrypt_maze_rhadamanthys_stop
- Size 227KB
- SHA256 a2c16c091489580b47293fd7a6eec06525257eb631a3898f1e01b3f8b539387f
- MD5 1c1dc0fbf2239877b59c33a7736c6816
- SHA1 4c8d9f1711965be03979b0379e15a6a02dab4b38
- SHA512 7a737bdcfa72c1c26c178f46df8e55ed410fca43d448ffc0a859b23863a098cf6b7c6c15604df0930b33fe591851471912f7b8f0e2a6377026eff034750ea30c
- SSDEEP 3072:ejjuLPL6PpQ4i4iX+J9fYJ8q+m4qroPIvl61161a4kgiocFZacC5:ePuLmCDSmnMPINs6U4s65
- TLSH T10C349D0231D1F271D6770A3258B99E5547FEFCB51A70AA0733882B0F59312E0A766B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Deletes itself
-
Loads dropped DLL