2026-08-13_a757374318c7ed68c48d7b2d4bab4b48_elex_floxif_manuscrypt_rhadamanthys_stop

General

Target
2026-08-13_a757374318c7ed68c48d7b2d4bab4b48_elex_floxif_manuscrypt_rhadamanthys_stop
Size 218KB
Sample260813-sdxh4abl2z
SHA256 90cfa0f1f01f88a7b7bcb679d0bde5bc41f1bde5e54bb433505212ce97d1295f
MD5 a757374318c7ed68c48d7b2d4bab4b48
SHA1 aa1b79e189c6201fa407e092012bbbc55b25b033
SHA512 46e34b92ea4b9bdb16612688729666a1d40eb47eecdd68c35ed8f369fc18834fb2bf31902c534765fccaa43c3dbd69432671f5434c5e01d88d06b7974e1e962d
SSDEEP 3072:bQhmm8pvQ8T5qFpDTYLMbZ2lQBV+UdE+rECWp7hK9iKTY:Mh0YFpDELMhBV+UdvrEFp7hK9iwY
TLSH
T15E243701350283F9F3180B313549F9C04AEA9D3E15EAE05FE7397A7A69B91831AB715F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-13_a757374318c7ed68c48d7b2d4bab4b48_elex_floxif_manuscrypt_rhadamanthys_stop

File Explorer

2026-08-13_a757374318c7ed68c48d7b2d4bab4b48_elex_floxif_manuscrypt_rhadamanthys_stop

.exe 218KB

2026-08-13_a757374318c7ed68c48d7b2d4bab4b48_elex_floxif_manuscrypt_rhadamanthys_stop

IMPHASH 0271b41476d3e0d20463e84104a3644f
SHA256 90cfa0f1f01f88a7b7bcb679d0bde5bc41f1bde5e54bb433505212ce97d1295f
MD5 a757374318c7ed68c48d7b2d4bab4b48
SHA1 aa1b79e189c6201fa407e092012bbbc55b25b033
SHA512 46e34b92ea4b9bdb16612688729666a1d40eb47eecdd68c35ed8f369fc18834fb2bf31902c534765fccaa43c3dbd69432671f5434c5e01d88d06b7974e1e962d
SSDEEP 3072:bQhmm8pvQ8T5qFpDTYLMbZ2lQBV+UdE+rECWp7hK9iKTY:Mh0YFpDELMhBV+UdvrEFp7hK9iwY
TLSH
T15E243701350283F9F3180B313549F9C04AEA9D3E15EAE05FE7397A7A69B91831AB715F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

c4:19:6d:77:89:e0:9b:de:c5:8d:6d:39:e0:31:65:47:1d:90:40:e7

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=SEIKO EPSON CORPORATION,OU=Information Service & Support Department,O=SEIKO EPSON CORPORATION,L=Suwa-shi,ST=Nagano,C=JP

Chains

Mar 10, 2016

CN=SEIKO EPSON CORPORATION,OU=Information Service & Support Department,O=SEIKO EPSON CORPORATION,L=Suwa-shi,ST=Nagano,C=JP

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=SEIKO EPSON CORPORATION,OU=Information Service & Support Department,O=SEIKO EPSON CORPORATION,L=Suwa-shi,ST=Nagano,C=JP

Serial Number

48:37:76:8f:dd:89:f0:bb:86:7e:06:eb:1a:5b:06:2b

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 31, 2015 - Sep 6, 2016

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 10, 2013 - Dec 9, 2023

Minor OS version

0

Major OS version

4

Entry point

16195

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\projects\scanop\scanop_dev\release\SCANOP.pdb

kernel32

OutputDebugStringA lstrlenA LoadLibraryA GetProcAddress FreeLibrary LoadResource SetEvent FindResourceExA CreateEventA CreateThread GetCommandLineW WideCharToMultiByte WaitForSingleObject LocalFree CreateMutexA GetLastError TerminateThread FindResourceA GetExitCodeThread CloseHandle SizeofResource LockResource MultiByteToWideChar InterlockedExchange FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetStringTypeW GetStringTypeA GetConsoleMode GetConsoleCP SetFilePointer Sleep RtlUnwind GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter RaiseException EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetVersionExA GetACP GetLocaleInfoA GetThreadLocale HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap VirtualAlloc GetModuleHandleA GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId LCMapStringA LCMapStringW HeapCreate VirtualFree ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType

user32

CreateWindowExA RegisterClassExA LoadCursorA LoadIconA DispatchMessageA TranslateMessage GetMessageA RegisterWindowMessageA LoadStringA FindWindowA PostMessageA PostQuitMessage EndPaint BeginPaint DestroyWindow DefWindowProcA UpdateWindow ShowWindow UnregisterClassA

shell32

CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-13_a757374318c7ed68c48d7b2d4bab4b48_elex_floxif_manuscrypt_rhadamanthys_stop

PE Signature issue

kernel32

user32

shell32

generic