General
- Target 2026-07-19_ef5f9443f484d5292cfddd8e64509cb6_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- Sample260720-ap12jscv7w
- SHA256 36770f3d41f7e5dc69ff5aa9f23e7779cc8e992c9c27e14623cd3e53ee12f1ad
- MD5 ef5f9443f484d5292cfddd8e64509cb6
- SHA1 09fb80d30bedbc08344c973b84253113eaf79a29
- SHA512 95a080052b46f891ae701b01e4f9a7ce78bb5d4592be0a2c0645eefe7cfb6a8c1c0dc9c620723b71316439b03d45eb5564b28505fbf85f9ebe88670467250dc6
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mhtj:jvSMxzKuN0m9G36xN9G36xttgj
- TLSH T1BFB4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_ef5f9443f484d5292cfddd8e64509cb6_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_ef5f9443f484d5292cfddd8e64509cb6_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_ef5f9443f484d5292cfddd8e64509cb6_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- SHA256 36770f3d41f7e5dc69ff5aa9f23e7779cc8e992c9c27e14623cd3e53ee12f1ad
- MD5 ef5f9443f484d5292cfddd8e64509cb6
- SHA1 09fb80d30bedbc08344c973b84253113eaf79a29
- SHA512 95a080052b46f891ae701b01e4f9a7ce78bb5d4592be0a2c0645eefe7cfb6a8c1c0dc9c620723b71316439b03d45eb5564b28505fbf85f9ebe88670467250dc6
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mhtj:jvSMxzKuN0m9G36xN9G36xttgj
- TLSH T1BFB4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Gepys trojan
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Loads dropped DLL