General
- Target 2026-08-23_b42d987edf545704bca98d6b75b8c712_elex_manuscrypt_rhadamanthys_stop
- Size 642KB
- Sample260824-awnpssbr3t
- SHA256 28f2ca093ca3c1faa9df6581f2068b871b49498bf9d81d1b052934bd2047a97f
- MD5 b42d987edf545704bca98d6b75b8c712
- SHA1 0bf1053546805304ca327d1cfffe9ad26ed3558c
- SHA512 aaaa1bda931f215e6e8d48cb58ac779fe0e1e1673fce444833030c9248951ab194b923882d73fc72f75f8dedffc2589b61ea4e087b37c14d7f3f3eb47c0a3f66
- SSDEEP 12288:daGGo2jQcsXO+XARfUbHH3MbJtI03eEnD8VTeVfnNVxFG:0GGhQcsXONfUjR03eEnDeTqfnNXo
- TLSH T1F5E4122171C5C0F6D56702B14AA6C6FD4BFAF8E6092485AB3FA4156E9F253C1CA0F393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_b42d987edf545704bca98d6b75b8c712_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_b42d987edf545704bca98d6b75b8c712_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_b42d987edf545704bca98d6b75b8c712_elex_manuscrypt_rhadamanthys_stop
- Size 642KB
- SHA256 28f2ca093ca3c1faa9df6581f2068b871b49498bf9d81d1b052934bd2047a97f
- MD5 b42d987edf545704bca98d6b75b8c712
- SHA1 0bf1053546805304ca327d1cfffe9ad26ed3558c
- SHA512 aaaa1bda931f215e6e8d48cb58ac779fe0e1e1673fce444833030c9248951ab194b923882d73fc72f75f8dedffc2589b61ea4e087b37c14d7f3f3eb47c0a3f66
- SSDEEP 12288:daGGo2jQcsXO+XARfUbHH3MbJtI03eEnD8VTeVfnNVxFG:0GGhQcsXONfUjR03eEnDeTqfnNXo
- TLSH T1F5E4122171C5C0F6D56702B14AA6C6FD4BFAF8E6092485AB3FA4156E9F253C1CA0F393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects AutoHotKey binaries acting as second stage droppers
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.