General
- Target 2026-07-24_7ab1819228d4a873da2cc2b9004ead2b_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop_swisyn
- Size 11.2MB
- Sample260724-k95kkswtcy
- SHA256 957c6d82913c22e82fefcb72af93482e29d7e8dd7d13da9a2e5b714252c09de0
- MD5 7ab1819228d4a873da2cc2b9004ead2b
- SHA1 ff141bef67010056f7c759f5935bbea5af42ce34
- SHA512 361a8453d8fad4649083e4d02215dda670b02648174d8bd0c02c688c88fbd432ff28b5dfa61eb6c1ac688500c82b6a4f56878418f63fc57c7485dff5e9a744f0
- SSDEEP 196608:xR9CERA+arUjDj4xBepnCASx9gUUOm/oVyDiZyqOYE2CIZeSt9wQP5IO:xfR8rUT0BunCp3gUyVkycE2TeSIQPaO
- TLSH T1A0C63322FDE08059ECA74674887C8369F2378E62037DDD67736E610459B2293B1B639F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_7ab1819228d4a873da2cc2b9004ead2b_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_7ab1819228d4a873da2cc2b9004ead2b_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_7ab1819228d4a873da2cc2b9004ead2b_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop_swisyn
- Size 11.2MB
- SHA256 957c6d82913c22e82fefcb72af93482e29d7e8dd7d13da9a2e5b714252c09de0
- MD5 7ab1819228d4a873da2cc2b9004ead2b
- SHA1 ff141bef67010056f7c759f5935bbea5af42ce34
- SHA512 361a8453d8fad4649083e4d02215dda670b02648174d8bd0c02c688c88fbd432ff28b5dfa61eb6c1ac688500c82b6a4f56878418f63fc57c7485dff5e9a744f0
- SSDEEP 196608:xR9CERA+arUjDj4xBepnCASx9gUUOm/oVyDiZyqOYE2CIZeSt9wQP5IO:xfR8rUT0BunCp3gUyVkycE2TeSIQPaO
- TLSH T1A0C63322FDE08059ECA74674887C8369F2378E62037DDD67736E610459B2293B1B639F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2