General

  • Target
    2026-08-24_4835576618f9c335e0878b0637b37ab8_elex_manuscrypt_rhadamanthys_stop
  • Size 1.3MB
  • Sample260825-rff4fstcjd
  • SHA256 79822d1af12726b56aceae49fa7fb11a6889e253932675a373018d05860e888e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Signatures

  • Revoked Certificate in Chain 1 IoCs

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2026-08-24_4835576618f9c335e0878b0637b37ab8_elex_manuscrypt_rhadamanthys_stop
    .exe 1.3MB
  • .data
    5KB
  • .rdata
    19KB
  • .rsrc/BINARY/129
    1.1MB
  • .rsrc/BITMAP/131.bmp
    83KB
  • .rsrc/DIALOG/130
    268B
  • .rsrc/GROUP_ICON/107
    118B
  • .rsrc/GROUP_ICON/132
    20B
  • .rsrc/GROUP_ICON/133
    20B
  • .rsrc/ICON/1.ico
    318B
  • .rsrc/ICON/10.ico
    7KB
  • .rsrc/ICON/2.ico
    1KB
  • .rsrc/ICON/3.ico
    766B
  • .rsrc/ICON/4.ico
    2KB
  • .rsrc/ICON/5.ico
    3KB
  • .rsrc/ICON/6.ico
    1KB
  • .rsrc/ICON/7.ico
    4KB
  • .rsrc/ICON/8.ico
    9KB
  • .rsrc/ICON/9.ico
    7KB
  • .rsrc/MANIFEST/1
    989B
  • .rsrc/version.txt
    1KB
  • .rsrc_1
    235B
  • .text
    97KB
  • CERTIFICATE
    10KB

2026-08-24_4835576618f9c335e0878b0637b37ab8_elex_manuscrypt_rhadamanthys_stop

  • IMPHASH 855c3a738c51333266912de3e283c819
  • SHA256 79822d1af12726b56aceae49fa7fb11a6889e253932675a373018d05860e888e
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Revoked Certificate in Chain

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
e6:3b:d2:0e:44:7f:38:1a:0b:0c:7a:c1:f9:5d:7c:90:87:d8:25:6c:86:8a:db:ad:b3:90:7f:42:b0:52:b6:9b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=74F Solutions Ltd,OU=IT,O=74F Solutions Ltd,POSTALCODE=B72 1QY,STREET=11 Wrens Court\, 46 South Parade,L=Sutton Coldfield,ST=West Midlands,C=GB

PE Signature issue

Digest
c8:12:18:ce:a7:0d:10:8a:75:ee:c7:7a:07:5a:be:66:f5:5f:cf:26
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=74F Solutions Ltd,OU=IT,O=74F Solutions Ltd,POSTALCODE=B72 1QY,STREET=11 Wrens Court\, 46 South Parade,L=Sutton Coldfield,ST=West Midlands,C=GB
Minor OS version
0
Major OS version
5
Entry point
48016
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths