General
- Target 2026-08-07_fb5acf6af75cea05a33e2f1334d6c650_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop_strictor_wannacry
- Size 213KB
- Sample260807-qy7hpayyev
- SHA256 1eb243c96b126691e2a6dd0d275e140f1173abd05b199f7c8eac64336a548844
- MD5 fb5acf6af75cea05a33e2f1334d6c650
- SHA1 1a3a47eeeede7260037e503e348d9595c40feee6
- SHA512 ed17989266ed30f15182ada882dbecb28929657815a13be991e97e3b74b4e2bea3a13ed41685b5a784f2316e348936a938676eedcfa46c314327658192c62807
- SSDEEP 3072:3biet78U17RphA+OHsKZDzyGm2BpgPit4YtvmSprgLJbiet78U:LiettR0MEyGfHqYtvh1gViett
- TLSH T1CE246C123AD5C8B2E85A41764A9EF7E54272FC205F2945C37BC03B8F9E3A2D15E39349
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_fb5acf6af75cea05a33e2f1334d6c650_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop_strictor_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_fb5acf6af75cea05a33e2f1334d6c650_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop_strictor_wannacry.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_fb5acf6af75cea05a33e2f1334d6c650_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop_strictor_wannacry
- Size 213KB
- SHA256 1eb243c96b126691e2a6dd0d275e140f1173abd05b199f7c8eac64336a548844
- MD5 fb5acf6af75cea05a33e2f1334d6c650
- SHA1 1a3a47eeeede7260037e503e348d9595c40feee6
- SHA512 ed17989266ed30f15182ada882dbecb28929657815a13be991e97e3b74b4e2bea3a13ed41685b5a784f2316e348936a938676eedcfa46c314327658192c62807
- SSDEEP 3072:3biet78U17RphA+OHsKZDzyGm2BpgPit4YtvmSprgLJbiet78U:LiettR0MEyGfHqYtvh1gViett
- TLSH T1CE246C123AD5C8B2E85A41764A9EF7E54272FC205F2945C37BC03B8F9E3A2D15E39349
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.