2026-07-29_1e822df01a65c25bc40e0c2c6542ee83_elex_manuscrypt_rhadamanthys_stop

General

Target
2026-07-29_1e822df01a65c25bc40e0c2c6542ee83_elex_manuscrypt_rhadamanthys_stop
Size 192KB
Sample260729-dd3yjsshpa
SHA256 bc0cba2493b1ff13e670bbbcbba27bac5953134c972ff60a2ae771df3739f648
MD5 1e822df01a65c25bc40e0c2c6542ee83
SHA1 3860cc4b9b67b6d5e9f04dd7407cd4946c5de90b
SHA512 027c48779183dae4af3be9443ea83bc704718e71666ef828251e7bd9624758ac3f08c7dcf88e2ec192b5dab800c30cb1a8090060e368ae51fbdb030754be0d2e
SSDEEP 3072:FDYjSbbuAget5Hr9nZ9l+Eq7zsFAz3/p6wHY9:pY+nnh/mQFA7Z6
TLSH
T1A014CF0434C3C4B3E5110176898ACAD547BFF8773F7669EBFFC0064A4A661D98A366E2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-29_1e822df01a65c25bc40e0c2c6542ee83_elex_manuscrypt_rhadamanthys_stop

File Explorer

2026-07-29_1e822df01a65c25bc40e0c2c6542ee83_elex_manuscrypt_rhadamanthys_stop

.exe 192KB

2026-07-29_1e822df01a65c25bc40e0c2c6542ee83_elex_manuscrypt_rhadamanthys_stop

IMPHASH a6d5306a07f7e76062a9e93a8edcf788
SHA256 bc0cba2493b1ff13e670bbbcbba27bac5953134c972ff60a2ae771df3739f648
MD5 1e822df01a65c25bc40e0c2c6542ee83
SHA1 3860cc4b9b67b6d5e9f04dd7407cd4946c5de90b
SHA512 027c48779183dae4af3be9443ea83bc704718e71666ef828251e7bd9624758ac3f08c7dcf88e2ec192b5dab800c30cb1a8090060e368ae51fbdb030754be0d2e
SSDEEP 3072:FDYjSbbuAget5Hr9nZ9l+Eq7zsFAz3/p6wHY9:pY+nnh/mQFA7Z6
TLSH
T1A014CF0434C3C4B3E5110176898ACAD547BFF8773F7669EBFFC0064A4A661D98A366E2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

24255

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

g:\My Documents\Visual Studio 2005\Projects\SealDecoder\release\SealDecoder.pdb

kernel32

InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree HeapAlloc GetFullPathNameA GetCommandLineA GetVersionExA GetProcessHeap TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc GetProcAddress GetModuleHandleA ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetDriveTypeA GetACP GetOEMCP TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer SetHandleCount GetFileType GetStartupInfoA ReadFile GetConsoleCP GetConsoleMode CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FlushFileBuffers HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage LoadLibraryA GetCurrentDirectoryA CreateFileA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoW SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-29_1e822df01a65c25bc40e0c2c6542ee83_elex_manuscrypt_rhadamanthys_stop

kernel32

generic