2026-08-20_30a6dc10e25906b17640991b6a9a68a8_elex_manuscrypt_rhadamanthys_silence_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-20_30a6dc10e25906b17640991b6a9a68a8_elex_manuscrypt_rhadamanthys_silence_stealc_stop
Size 223KB
Sample260821-dpsa7afn41
SHA256 b868cac1184984811494f8f2c2c73970baeda01c71076555b3e435d9f537b9c3
MD5 30a6dc10e25906b17640991b6a9a68a8
SHA1 ab2b4782681f4c67b1725ea6f6fc099131971b72
SHA512 3953bfb40d3f97f2dff5da543e9ca533bbea28400530491f6d337e7ad379987fef5c095c5e90c85d5ceeac2a0919370ccc69b07762abaa2adf54713acf56cc6e
SSDEEP 3072:dFMS4gx0h0LEyAmQkwpoLqpRY5g2YL+ikQCZf/hsnfen4:JdK9PlfAhcuZHa2n
TLSH
T15B247B107A82C072D2B302710AF8DBB29A7DBDB24F659DCBA7D40B5D0A701D19B35B67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_30a6dc10e25906b17640991b6a9a68a8_elex_manuscrypt_rhadamanthys_silence_stealc_stop

File Explorer

2026-08-20_30a6dc10e25906b17640991b6a9a68a8_elex_manuscrypt_rhadamanthys_silence_stealc_stop

.exe 223KB

2026-08-20_30a6dc10e25906b17640991b6a9a68a8_elex_manuscrypt_rhadamanthys_silence_stealc_stop

IMPHASH e48f6fa8df0deaca12a896666201a709
SHA256 b868cac1184984811494f8f2c2c73970baeda01c71076555b3e435d9f537b9c3
MD5 30a6dc10e25906b17640991b6a9a68a8
SHA1 ab2b4782681f4c67b1725ea6f6fc099131971b72
SHA512 3953bfb40d3f97f2dff5da543e9ca533bbea28400530491f6d337e7ad379987fef5c095c5e90c85d5ceeac2a0919370ccc69b07762abaa2adf54713acf56cc6e
SSDEEP 3072:dFMS4gx0h0LEyAmQkwpoLqpRY5g2YL+ikQCZf/hsnfen4:JdK9PlfAhcuZHa2n
TLSH
T15B247B107A82C072D2B302710AF8DBB29A7DBDB24F659DCBA7D40B5D0A701D19B35B67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

54142

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileA FindNextFileA EnterCriticalSection LeaveCriticalSection DeleteFileA Sleep CreateDirectoryA WaitForSingleObject GetTickCount CreateFileA WriteFile CloseHandle CreateMutexA GetLastError GetModuleFileNameA InitializeCriticalSectionAndSpinCount SetFileAttributesA ExitProcess SetLastError CreateProcessA CreateToolhelp32Snapshot Process32First Process32Next OpenProcess TerminateProcess IsWow64Process GetCurrentProcess InterlockedDecrement WideCharToMultiByte SetEndOfFile CreateFileW SetEnvironmentVariableA ReadConsoleW WriteConsoleW SetStdHandle LoadLibraryW OutputDebugStringW SetFilePointer HeapReAlloc GetOEMCP IsValidCodePage GetACP FreeEnvironmentStringsW GetEnvironmentStringsW GetCurrentProcessId QueryPerformanceCounter FlushFileBuffers SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP GetFileType GetProcessHeap InterlockedIncrement EncodePointer DecodePointer DeleteCriticalSection MultiByteToWideChar GetStringTypeW lstrlenA LocalFree HeapFree CreateThread GetCurrentThreadId ExitThread GetProcAddress LoadLibraryExW GetSystemTimeAsFileTime IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind HeapAlloc GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle GetModuleFileNameW GetModuleHandleExW AreFileApisANSI HeapSize

user32

GetForegroundWindow GetShellWindow GetWindowRect GetCursorPos GetSystemMetrics GetDesktopWindow

ole32

CoInitializeSecurity CoCreateInstance CoUninitialize CoSetProxyBlanket CoInitializeEx

oleaut32

SysAllocString SysFreeString VariantClear

ws2_32

send closesocket WSACleanup connect htons gethostbyname socket WSAStartup recv WSAGetLastError

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_30a6dc10e25906b17640991b6a9a68a8_elex_manuscrypt_rhadamanthys_silence_stealc_stop

kernel32

user32

ole32

oleaut32

ws2_32

generic