General
- Target 2026-07-27_fa89aa0250143be62e86f840c5b8bba6_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- Sample260727-m4ajcs1thv
- SHA256 c5bdaba2b8a5642fae6ad0f25bf41936d07e1491b9c9ca690a8072e1737e08a4
- MD5 fa89aa0250143be62e86f840c5b8bba6
- SHA1 45905461b1b679448db8e76aba1e766011bde3ae
- SHA512 ef45ac47356689a8214073570ea82775c4cf9241739eb47c3899de2b59c16902f6ff6933084e13e8aed9d4cba17d1f8b6270190510e728e04d1885ec0a27f51e
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mhtl:jvSMxzKuN0m9G36xN9G36xttgl
- TLSH T1A4B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_fa89aa0250143be62e86f840c5b8bba6_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_fa89aa0250143be62e86f840c5b8bba6_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_fa89aa0250143be62e86f840c5b8bba6_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- SHA256 c5bdaba2b8a5642fae6ad0f25bf41936d07e1491b9c9ca690a8072e1737e08a4
- MD5 fa89aa0250143be62e86f840c5b8bba6
- SHA1 45905461b1b679448db8e76aba1e766011bde3ae
- SHA512 ef45ac47356689a8214073570ea82775c4cf9241739eb47c3899de2b59c16902f6ff6933084e13e8aed9d4cba17d1f8b6270190510e728e04d1885ec0a27f51e
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mhtl:jvSMxzKuN0m9G36xN9G36xttgl
- TLSH T1A4B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Gepys trojan
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Loads dropped DLL