2026-07-16_bda5e1f08f81a263779a9ee321f07f3d_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop

General

Target
2026-07-16_bda5e1f08f81a263779a9ee321f07f3d_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop
Size 7.7MB
Sample260716-nd61baft2t
SHA256 74ea3a3ab0b1ea54ce1f6726eebaecec7220565bafabfe42084ebb2e0dc0cddc
MD5 bda5e1f08f81a263779a9ee321f07f3d
SHA1 ff0157f79fbbfd5802b106a54716633fb986fdae
SHA512 db5de307a480c659a89207fbcba2cbcd5e2267bded65bb32046be097be680564be4bc43bc1110ba7aca8c8845f676979b37d7656f90b1a871a410ca5c1194084
SSDEEP 196608:9YnJNM0kRMIQ4B0N6EvjG0CUw53kxs2XRHlc4u2lcIW6YplTpL:9YjWMIizvqkwBEsQlc4uSfW6ET
TLSH
T1BF863302FDE7E831F5BA1FB088618BCA973BAD216875816F7F4C01567D752885A39383
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-16_bda5e1f08f81a263779a9ee321f07f3d_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop

File Explorer

2026-07-16_bda5e1f08f81a263779a9ee321f07f3d_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop

.exe 7.7MB

2026-07-16_bda5e1f08f81a263779a9ee321f07f3d_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop

IMPHASH cc000e0a56358759c95f653af1246259
SHA256 74ea3a3ab0b1ea54ce1f6726eebaecec7220565bafabfe42084ebb2e0dc0cddc
MD5 bda5e1f08f81a263779a9ee321f07f3d
SHA1 ff0157f79fbbfd5802b106a54716633fb986fdae
SHA512 db5de307a480c659a89207fbcba2cbcd5e2267bded65bb32046be097be680564be4bc43bc1110ba7aca8c8845f676979b37d7656f90b1a871a410ca5c1194084
SSDEEP 196608:9YnJNM0kRMIQ4B0N6EvjG0CUw53kxs2XRHlc4u2lcIW6YplTpL:9YjWMIizvqkwBEsQlc4uSfW6ET
TLSH
T1BF863302FDE7E831F5BA1FB088618BCA973BAD216875816F7F4C01567D752885A39383
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

52628

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileAttributesA RemoveDirectoryA SetEndOfFile SetFilePointer CloseHandle UnmapViewOfFile MapViewOfFile CreateFileMappingA GetFileSize CreateFileA GetWindowsDirectoryA MoveFileExA GlobalFree GlobalUnlock GlobalHandle _lclose _llseek _lread _lopen GlobalLock GlobalAlloc GlobalMemoryStatus GetVersion GetModuleFileNameA WriteFile GetSystemTime CreateProcessA LocalFree ExitProcess FormatMessageA DeleteFileA GetModuleHandleA GetVolumeInformationA FindNextFileA GetTickCount WideCharToMultiByte WaitForSingleObject GetLongPathNameA GetTempPathA GetCommandLineA CopyFileA GetFileAttributesA LoadLibraryExA GetSystemDirectoryA SetErrorMode MultiByteToWideChar GetLocalTime lstrlenA CreateFileW ReadFile GetEnvironmentVariableA GetDriveTypeA LocalAlloc DosDateTimeToFileTime LocalFileTimeToFileTime GetVersionExA SetFileTime CreateDirectoryA SetCurrentDirectoryA FindFirstFileA FindClose GetLastError GetProcAddress FreeLibrary InterlockedExchange LoadLibraryA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree HeapReAlloc GetProcessHeap GetStartupInfoA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep HeapSize DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapDestroy HeapCreate GetStdHandle LCMapStringA LCMapStringW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode InitializeCriticalSection SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers

gdi32

CreateDCA SetBkColor SetTextColor SetTextAlign GetBkColor GetTextExtentPoint32A ExtTextOutA GetDeviceCaps CreateFontIndirectA DeleteDC SelectObject DeleteObject

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-16_bda5e1f08f81a263779a9ee321f07f3d_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop

kernel32

gdi32

generic