2026-07-10_695b9b4a7bb229b4d5702539e22d7f6d_elex_manuscrypt_rhadamanthys_silence_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-10_695b9b4a7bb229b4d5702539e22d7f6d_elex_manuscrypt_rhadamanthys_silence_stealc_stop
Size 213KB
Sample260710-e343kset5w
SHA256 0bacb9ee1dca54e9e997cbe63c95c7ad48e12c6e786713c734a0dd3043e88613
MD5 695b9b4a7bb229b4d5702539e22d7f6d
SHA1 2840a0183bb35df57742746e2ec01dc056efd91e
SHA512 2a221fc774d8fee3a068347c4b8b0c2d38fefff2ffa21c75ab99ba9d7b647b29e79dfc06015a48105bebc2bcb43bd0c8dde9aca2f5dc1909db2767f08ae58be2
SSDEEP 3072:9mh7T6xGiYQxWpYwK9XrT8r+Ee03T1Z3lFgEvNbOz6N0:9m1tnzK9X/8rt/1VgEVbu6m
TLSH
T13A245A1079C58071E57302390AF8DF76467CF9720B666ECBB798CB8D0A709D2A739762
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-10_695b9b4a7bb229b4d5702539e22d7f6d_elex_manuscrypt_rhadamanthys_silence_stealc_stop

File Explorer

2026-07-10_695b9b4a7bb229b4d5702539e22d7f6d_elex_manuscrypt_rhadamanthys_silence_stealc_stop

.exe 213KB

2026-07-10_695b9b4a7bb229b4d5702539e22d7f6d_elex_manuscrypt_rhadamanthys_silence_stealc_stop

IMPHASH 8240168d779a7e164cd3ea71e5b25621
SHA256 0bacb9ee1dca54e9e997cbe63c95c7ad48e12c6e786713c734a0dd3043e88613
MD5 695b9b4a7bb229b4d5702539e22d7f6d
SHA1 2840a0183bb35df57742746e2ec01dc056efd91e
SHA512 2a221fc774d8fee3a068347c4b8b0c2d38fefff2ffa21c75ab99ba9d7b647b29e79dfc06015a48105bebc2bcb43bd0c8dde9aca2f5dc1909db2767f08ae58be2
SSDEEP 3072:9mh7T6xGiYQxWpYwK9XrT8r+Ee03T1Z3lFgEvNbOz6N0:9m1tnzK9X/8rt/1VgEVbu6m
TLSH
T13A245A1079C58071E57302390AF8DF76467CF9720B666ECBB798CB8D0A709D2A739762
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

49368

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileA FindNextFileA LeaveCriticalSection CreateDirectoryA EnterCriticalSection DeleteFileA WaitForSingleObject Sleep TerminateProcess ExitProcess GetTickCount InitializeCriticalSectionAndSpinCount GetLastError SetFileAttributesA GetModuleFileNameA CreateMutexA DeleteCriticalSection CloseHandle CreateFileA WriteFile InterlockedDecrement GetCurrentProcess Process32First OpenProcess WideCharToMultiByte CreateProcessA SetLastError Process32Next IsWow64Process CreateToolhelp32Snapshot SetEndOfFile CreateFileW SetEnvironmentVariableA LoadLibraryW OutputDebugStringW WriteConsoleW SetStdHandle ReadConsoleW HeapReAlloc GetOEMCP IsValidCodePage SetFilePointer GetACP FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetModuleFileNameW HeapSize GetConsoleMode GetConsoleCP FlushFileBuffers SetFilePointerEx ReadFile AreFileApisANSI GetModuleHandleExW GetProcessHeap GetFileType GetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW InterlockedIncrement EncodePointer DecodePointer MultiByteToWideChar GetStringTypeW lstrlenA LocalFree HeapFree CreateThread GetCurrentThreadId ExitThread GetProcAddress LoadLibraryExW IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind HeapAlloc GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW CompareStringW LCMapStringW

user32

GetCursorPos DispatchMessageA ShowWindow DefWindowProcA CreateWindowExA TranslateMessage PostQuitMessage RegisterClassExA GetMessageA UpdateWindow

ole32

CoSetProxyBlanket CoInitializeSecurity CoInitializeEx CoUninitialize CoCreateInstance

oleaut32

SysAllocString VariantClear SysFreeString

ws2_32

connect WSAStartup WSAGetLastError htons WSACleanup recv send gethostbyname closesocket socket

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-10_695b9b4a7bb229b4d5702539e22d7f6d_elex_manuscrypt_rhadamanthys_silence_stealc_stop

kernel32

user32

ole32

oleaut32

ws2_32

generic