General
- Target 2026-08-05_f09bbea0d1152185c207181e74accc7a_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- Sample260806-cgdmdsfc73
- SHA256 195a2db09c4f2f15a5db0b9d48b3de4387fe5a751c19aa3bd37e68b893f3f290
- MD5 f09bbea0d1152185c207181e74accc7a
- SHA1 afdfdf414efb8d9d2f5b3a9ad60045877a50031a
- SHA512 33ad540d8b767a0e18c32298e1a13a11c01e82e24196f5e75646f20ae37a6b991bc6412a73e9f34967fd927a903ea0894d47751db4e99770407504e3b6beb8df
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mhtV:jvSMxzKuN0m9G36xN9G36xttgV
- TLSH T1A4B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_f09bbea0d1152185c207181e74accc7a_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_f09bbea0d1152185c207181e74accc7a_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_f09bbea0d1152185c207181e74accc7a_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- SHA256 195a2db09c4f2f15a5db0b9d48b3de4387fe5a751c19aa3bd37e68b893f3f290
- MD5 f09bbea0d1152185c207181e74accc7a
- SHA1 afdfdf414efb8d9d2f5b3a9ad60045877a50031a
- SHA512 33ad540d8b767a0e18c32298e1a13a11c01e82e24196f5e75646f20ae37a6b991bc6412a73e9f34967fd927a903ea0894d47751db4e99770407504e3b6beb8df
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mhtV:jvSMxzKuN0m9G36xN9G36xttgV
- TLSH T1A4B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Gepys trojan
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Loads dropped DLL