General
- Target 2026-08-09_1bcb54495fb5c718e0dcab32eed09f8f_elex_karagany_manuscrypt_maze_rhadamanthys_smoke-loader_stop
- Size 1.4MB
- Sample260810-ab78ps1wgt
- SHA256 8bb3e2527bad100f1c7e02af08719c4ac42f1df36be8f60baf3b2fc5c7207118
- MD5 1bcb54495fb5c718e0dcab32eed09f8f
- SHA1 1412bc7d06860916f00e1d8d364907877d4384cc
- SHA512 93045e9c9e22b9f003df442ac34490153b5ab2e9ffadc2dcfdf693576879dd6f63a6866a5e6af4fc8edf1c45c5099903450ec8dbe12a8aed563bf90fa5e62caa
- SSDEEP 24576:ZyC0u0AfYLH8AcevDN0FImbwQuq3Wia7gD:4C0u0AQgAT76sQuE
- TLSH T1EA65E00172F5F076FABF42714972575139EEFCA4CB78C68B26C8F54D08349808A69F6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_1bcb54495fb5c718e0dcab32eed09f8f_elex_karagany_manuscrypt_maze_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_1bcb54495fb5c718e0dcab32eed09f8f_elex_karagany_manuscrypt_maze_rhadamanthys_smoke-loader_stop
- Size 1.4MB
- SHA256 8bb3e2527bad100f1c7e02af08719c4ac42f1df36be8f60baf3b2fc5c7207118
- MD5 1bcb54495fb5c718e0dcab32eed09f8f
- SHA1 1412bc7d06860916f00e1d8d364907877d4384cc
- SHA512 93045e9c9e22b9f003df442ac34490153b5ab2e9ffadc2dcfdf693576879dd6f63a6866a5e6af4fc8edf1c45c5099903450ec8dbe12a8aed563bf90fa5e62caa
- SSDEEP 24576:ZyC0u0AfYLH8AcevDN0FImbwQuq3Wia7gD:4C0u0AQgAT76sQuE
- TLSH T1EA65E00172F5F076FABF42714972575139EEFCA4CB78C68B26C8F54D08349808A69F6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1