2026-07-23_a0d291601fb7762f4699385ff314254a_elex_manuscrypt_rhadamanthys_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-23_a0d291601fb7762f4699385ff314254a_elex_manuscrypt_rhadamanthys_stop
Size 152KB
Sample260723-q3bltabc55
SHA256 48b3dcbafde2274f6229dd21d018e7c43d20d3a9a6812eb1a94c8b655508f577
MD5 a0d291601fb7762f4699385ff314254a
SHA1 b74d9ac4a9c3346461d21e3e638a9c95f87cb5dd
SHA512 0e236164b8185ec99e7229a5cbdbbfe0bd64fc209a2f5648301f6eb126dc75731af27e85a4098a46f7df3ca2a7fc63d15bb5f8e5382b006100a4ffff9976e7ef
SSDEEP 1536:TXI+av1TInq2DG0HcPJV1NsvY6Rj31db/L/CBskric/l/vHRS9sJFUtNW:TY+iTIq2DG08HAhLTzCFvHRSiJFUtNW
TLSH
T17FE39C2336C2C473E45600798D82C7E25AB2FC310D3A55A77BD8374E9E745A69A3E3D2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_a0d291601fb7762f4699385ff314254a_elex_manuscrypt_rhadamanthys_stop

File Explorer

2026-07-23_a0d291601fb7762f4699385ff314254a_elex_manuscrypt_rhadamanthys_stop

.exe 152KB

2026-07-23_a0d291601fb7762f4699385ff314254a_elex_manuscrypt_rhadamanthys_stop

IMPHASH b994cd2740ee2e88e4e533e71acb1668
SHA256 48b3dcbafde2274f6229dd21d018e7c43d20d3a9a6812eb1a94c8b655508f577
MD5 a0d291601fb7762f4699385ff314254a
SHA1 b74d9ac4a9c3346461d21e3e638a9c95f87cb5dd
SHA512 0e236164b8185ec99e7229a5cbdbbfe0bd64fc209a2f5648301f6eb126dc75731af27e85a4098a46f7df3ca2a7fc63d15bb5f8e5382b006100a4ffff9976e7ef
SSDEEP 1536:TXI+av1TInq2DG0HcPJV1NsvY6Rj31db/L/CBskric/l/vHRS9sJFUtNW:TY+iTIq2DG08HAhLTzCFvHRSiJFUtNW
TLSH
T17FE39C2336C2C473E45600798D82C7E25AB2FC310D3A55A77BD8374E9E745A69A3E3D2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

52093

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject CreateThread lstrlenA lstrcmpiA InterlockedIncrement GetModuleFileNameA IsDBCSLeadByte FreeLibrary SizeofResource LoadResource FindResourceA LoadLibraryExA GetModuleHandleA GetVersionExA CreateEventA Sleep WaitForMultipleObjects GetProcAddress LoadLibraryA CreateMutexA CloseHandle GetCommandLineA CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle SetFilePointer ReadFile LCMapStringW LCMapStringA GetStringTypeW GetLastError DeleteCriticalSection InitializeCriticalSection RaiseException lstrlenW WideCharToMultiByte MultiByteToWideChar CompareFileTime GetCurrentThreadId InterlockedDecrement GetStringTypeA GetOEMCP GetCPInfo GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings InterlockedExchange GetACP GetLocaleInfoA GetThreadLocale EnterCriticalSection LeaveCriticalSection LocalFree RtlUnwind HeapAlloc HeapFree VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc GetProcessHeap GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError VirtualFree HeapDestroy HeapCreate ExitProcess WriteFile GetStdHandle HeapSize FreeEnvironmentStringsA

user32

FindWindowA UnregisterClassA EnumDisplaySettingsA PostThreadMessageA ChangeDisplaySettingsExA RegisterClassA CreateWindowExA ChangeDisplaySettingsA DispatchMessageA SetTimer PostQuitMessage RegisterWindowMessageA DefWindowProcA KillTimer GetMessageA SendNotifyMessageA PostMessageA CharNextA

advapi32

RegDeleteValueA RegOpenKeyExA RegEnumKeyExA RegDeleteKeyA RegSetValueExA RegQueryValueExA RegCloseKey RegCreateKeyExA RegQueryInfoKeyA

ole32

CoUninitialize CoCreateInstance CoTaskMemAlloc CoTaskMemRealloc CoRevokeClassObject CoInitialize CoSuspendClassObjects CoTaskMemFree StringFromGUID2 CoRegisterClassObject

oleaut32

VarUI4FromStr RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysStringLen SysFreeString SysAllocString VariantClear

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_a0d291601fb7762f4699385ff314254a_elex_manuscrypt_rhadamanthys_stop

kernel32

user32

advapi32

ole32

oleaut32

generic