2026-08-08_418f6ba535837df0d9da838071c308d0_elex_manuscrypt_maze_rhadamanthys_stop

General

Target
2026-08-08_418f6ba535837df0d9da838071c308d0_elex_manuscrypt_maze_rhadamanthys_stop
Size 12.2MB
Sample260808-wlcqfascka
SHA256 6046f063128b7b9d4a785aab90853af88828b070e3e642e59256c313e497f4cc
MD5 418f6ba535837df0d9da838071c308d0
SHA1 87fb5523db2c65b51b87960b187961d3458cd101
SHA512 6a06764c9f74637670cca901cecf2cd924fbe869dcbf2bde4a184b30ba4aabc26d0650254722bbbc72467f409e3578237359500d9f0533d95471b20dbf6b158c
SSDEEP 196608:uNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNX:
TLSH
T1FED65A10F2E15156F3B75A336AF116950B3FBB9EA631824E0A4317DE0FA468099D633F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_418f6ba535837df0d9da838071c308d0_elex_manuscrypt_maze_rhadamanthys_stop

File Explorer

2026-08-08_418f6ba535837df0d9da838071c308d0_elex_manuscrypt_maze_rhadamanthys_stop

.exe 12.2MB

2026-08-08_418f6ba535837df0d9da838071c308d0_elex_manuscrypt_maze_rhadamanthys_stop

IMPHASH 65336e3abaab798a678743e13b696465
SHA256 6046f063128b7b9d4a785aab90853af88828b070e3e642e59256c313e497f4cc
MD5 418f6ba535837df0d9da838071c308d0
SHA1 87fb5523db2c65b51b87960b187961d3458cd101
SHA512 6a06764c9f74637670cca901cecf2cd924fbe869dcbf2bde4a184b30ba4aabc26d0650254722bbbc72467f409e3578237359500d9f0533d95471b20dbf6b158c
SSDEEP 196608:uNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNX:
TLSH
T1FED65A10F2E15156F3B75A336AF116950B3FBB9EA631824E0A4317DE0FA468099D633F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

13449

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetEnvironmentVariableW SetupComm CommConfigDialogA GetDefaultCommConfigW ClearCommError SetConsoleTextAttribute ReadConsoleA ConnectNamedPipe GlobalAlloc FatalAppExitW ReadFileScatter GetAtomNameW GetMailslotInfo lstrcatA GetVolumePathNameA CreateMailslotW WritePrivateProfileStringW DisconnectNamedPipe GetLastError PeekConsoleInputW GetLocalTime WTSGetActiveConsoleSessionId GetThreadPriority CreateIoCompletionPort GetModuleHandleA VirtualProtect ScrollConsoleScreenBufferA GetVolumeNameForVolumeMountPointW EncodePointer DecodePointer GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent IsProcessorFeaturePresent ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar WideCharToMultiByte HeapSize HeapFree EnterCriticalSection LeaveCriticalSection ReadFile SetFilePointerEx HeapAlloc SetLastError GetCurrentThreadId GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA WriteFile GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc LCMapStringW GetConsoleMode SetStdHandle FlushFileBuffers GetConsoleCP OutputDebugStringW GetStringTypeW WriteConsoleW CloseHandle CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_418f6ba535837df0d9da838071c308d0_elex_manuscrypt_maze_rhadamanthys_stop

kernel32

generic