General
- Target 2026-08-05_9727215359c940c78079ae619977f2f8_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- Sample260806-abjkcayfld
- SHA256 43fd89dac8858beb53800d32fd617ede01c904051488a4ebf9d13aa20e20865f
- MD5 9727215359c940c78079ae619977f2f8
- SHA1 5bf78466de082431e441967ce9c0b5c070536d5b
- SHA512 c90762041f4f40eae4c8518c9487ccc13319f313933250b30f5c709134a461932194348635a1dea6e0a40e309c05944f7b259f21570265da9c260db714c025e2
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mht6:jvSMxzKuN0m9G36xN9G36xttg6
- TLSH T130B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_9727215359c940c78079ae619977f2f8_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_9727215359c940c78079ae619977f2f8_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_9727215359c940c78079ae619977f2f8_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- SHA256 43fd89dac8858beb53800d32fd617ede01c904051488a4ebf9d13aa20e20865f
- MD5 9727215359c940c78079ae619977f2f8
- SHA1 5bf78466de082431e441967ce9c0b5c070536d5b
- SHA512 c90762041f4f40eae4c8518c9487ccc13319f313933250b30f5c709134a461932194348635a1dea6e0a40e309c05944f7b259f21570265da9c260db714c025e2
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mht6:jvSMxzKuN0m9G36xN9G36xttg6
- TLSH T130B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Gepys trojan
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Loads dropped DLL