2026-08-10_35a6ce347baa45953a02ff958d18b9ba_elex_manuscrypt_rhadamanthys_silence_stop

General

Target
2026-08-10_35a6ce347baa45953a02ff958d18b9ba_elex_manuscrypt_rhadamanthys_silence_stop
Size 204KB
Sample260810-heepkaee88
SHA256 fc82e32a78d19823dceb5d1f58957eb063d9a97926b3a74512f9755455e7e64d
MD5 35a6ce347baa45953a02ff958d18b9ba
SHA1 f8520e90b5bc66e04f0aa3fb894ef2422a9ab75e
SHA512 f84ca3b5152e3071fcd9d3d27e7772936090757b3097dcbb7acb764dc522947dc9df633ac99a952c7eb0e7ed6792b5cb681e424727395cc7cab0c74a7c4e4b98
SSDEEP 3072:KEHuVcqMIrEM/3ruhHpPKeqv1l/fnv+8UMBZJrX5xFcCM:KEHQcqMIb3ihHIeqtl/HHZvxFcD
TLSH
T1C3247A127991C471E5B3427116F8DB320ABDBD320BA269DBBB940B4D1A741D3A335BA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_35a6ce347baa45953a02ff958d18b9ba_elex_manuscrypt_rhadamanthys_silence_stop

File Explorer

2026-08-10_35a6ce347baa45953a02ff958d18b9ba_elex_manuscrypt_rhadamanthys_silence_stop

.exe 204KB

2026-08-10_35a6ce347baa45953a02ff958d18b9ba_elex_manuscrypt_rhadamanthys_silence_stop

IMPHASH 9b441001a5ca4ead583edeb006ea59dd
SHA256 fc82e32a78d19823dceb5d1f58957eb063d9a97926b3a74512f9755455e7e64d
MD5 35a6ce347baa45953a02ff958d18b9ba
SHA1 f8520e90b5bc66e04f0aa3fb894ef2422a9ab75e
SHA512 f84ca3b5152e3071fcd9d3d27e7772936090757b3097dcbb7acb764dc522947dc9df633ac99a952c7eb0e7ed6792b5cb681e424727395cc7cab0c74a7c4e4b98
SSDEEP 3072:KEHuVcqMIrEM/3ruhHpPKeqv1l/fnv+8UMBZJrX5xFcCM:KEHQcqMIb3ihHIeqtl/HHZvxFcD
TLSH
T1C3247A127991C471E5B3427116F8DB320ABDBD320BA269DBBB940B4D1A741D3A335BA3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

46238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileA FindNextFileA CreateDirectoryA EnterCriticalSection LeaveCriticalSection DeleteFileA Sleep GetTickCount CreateFileA WriteFile CloseHandle CreateMutexA GetLastError SetFileAttributesA GetModuleFileNameA InitializeCriticalSectionAndSpinCount WaitForSingleObject ExitProcess SetLastError CreateProcessA CreateToolhelp32Snapshot Process32First Process32Next TerminateProcess GetCurrentProcess InterlockedDecrement WideCharToMultiByte SetEndOfFile CreateFileW SetEnvironmentVariableA ReadConsoleW WriteConsoleW SetStdHandle LoadLibraryW LoadLibraryExW OutputDebugStringW SetFilePointer HeapReAlloc FreeEnvironmentStringsW GetEnvironmentStringsW GetCurrentProcessId QueryPerformanceCounter GetCurrentThreadId GetOEMCP GetACP IsValidCodePage InterlockedIncrement EncodePointer DecodePointer DeleteCriticalSection MultiByteToWideChar GetStringTypeW LocalFree HeapFree IsDebuggerPresent IsProcessorFeaturePresent GetSystemTimeAsFileTime GetCommandLineA RaiseException RtlUnwind HeapAlloc GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle GetModuleFileNameW GetModuleHandleExW AreFileApisANSI HeapSize GetProcessHeap GetFileType GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx FlushFileBuffers

user32

GetCursorPos

oleaut32

VariantClear

ws2_32

socket gethostbyname htons connect WSAStartup closesocket recv send WSACleanup WSAGetLastError

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_35a6ce347baa45953a02ff958d18b9ba_elex_manuscrypt_rhadamanthys_silence_stop

kernel32

user32

oleaut32

ws2_32

generic