2026-08-21_432fced6d7c3d8d5006f82d5d15299fc_elex_manuscrypt_maze_rhadamanthys_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-21_432fced6d7c3d8d5006f82d5d15299fc_elex_manuscrypt_maze_rhadamanthys_stop
Size 1.3MB
Sample260822-tedcaawdmc
SHA256 c56794720bbdd457635ff064cfc5f8fd1964f08cba28d2724b022d2afbb40ffd
MD5 432fced6d7c3d8d5006f82d5d15299fc
SHA1 56864ac20109474a55dcbf8bfe1eeac6f795ecd4
SHA512 150b4be7b0763f334f6a0b2f31db2237a6a154dd355fa0d9b655406c8b6c6c817f7587ae8ccd392c50309c82b18793c15ac005392017ab2c239ec0bc1ab8a2c2
SSDEEP 12288:JdL6n9CtxLSLDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53nHVoTOyEx:JdG9CbL5NyBo4kx929bL3Hnx
TLSH
T10155010176E8C035F9F71B7058788A508D3CFCA90B7499CBB794562E59B8EC18E32B63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-21_432fced6d7c3d8d5006f82d5d15299fc_elex_manuscrypt_maze_rhadamanthys_stop

File Explorer

2026-08-21_432fced6d7c3d8d5006f82d5d15299fc_elex_manuscrypt_maze_rhadamanthys_stop

.exe 1.3MB

2026-08-21_432fced6d7c3d8d5006f82d5d15299fc_elex_manuscrypt_maze_rhadamanthys_stop

IMPHASH de592ada22417ab91b397fef1b30b4e1
SHA256 c56794720bbdd457635ff064cfc5f8fd1964f08cba28d2724b022d2afbb40ffd
MD5 432fced6d7c3d8d5006f82d5d15299fc
SHA1 56864ac20109474a55dcbf8bfe1eeac6f795ecd4
SHA512 150b4be7b0763f334f6a0b2f31db2237a6a154dd355fa0d9b655406c8b6c6c817f7587ae8ccd392c50309c82b18793c15ac005392017ab2c239ec0bc1ab8a2c2
SSDEEP 12288:JdL6n9CtxLSLDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53nHVoTOyEx:JdG9CbL5NyBo4kx929bL3Hnx
TLSH
T10155010176E8C035F9F71B7058788A508D3CFCA90B7499CBB794562E59B8EC18E32B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18810

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Jenkins\workspace\ScanUtility_Win_18_2H_1.5.0_Build\Source\SetEvent\Release\SetEvent.pdb

setupapi

SetupDiGetDeviceRegistryPropertyW SetupDiEnumDeviceInfo SetupDiGetClassDevsW SetupDiGetDeviceInstanceIdW

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

kernel32

GetProcAddress CloseHandle GetLastError LCMapStringW Sleep GetTickCount InterlockedDecrement OutputDebugStringW SetStdHandle WriteConsoleW FlushFileBuffers LocalFree GetCommandLineW HeapReAlloc SetFilePointerEx GetConsoleMode GetConsoleCP FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetFileType GetProcessHeap GetStringTypeW LoadLibraryExW EncodePointer DecodePointer ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte CreateFileW RaiseException RtlUnwind IsDebuggerPresent IsProcessorFeaturePresent HeapSize HeapFree IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError GetCurrentThreadId HeapAlloc EnterCriticalSection LeaveCriticalSection DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle WriteFile GetModuleFileNameW

user32

RegisterDeviceNotificationW UnregisterDeviceNotification

advapi32

RegisterServiceCtrlHandlerExW StartServiceCtrlDispatcherW RegCloseKey RegEnumKeyExW ControlService RegOpenKeyExW QueryServiceStatus StartServiceW RegQueryValueExW OpenServiceW OpenSCManagerW CloseServiceHandle SetServiceStatus

ole32

CLSIDFromString CoInitialize CoCreateInstance CoUninitialize

oleaut32

SysFreeString SysAllocString

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-21_432fced6d7c3d8d5006f82d5d15299fc_elex_manuscrypt_maze_rhadamanthys_stop

setupapi

version

kernel32

user32

advapi32

ole32

oleaut32

generic