2026-08-24_4402f33fb5239b46fad1fbdfcba9fabe_elex_manuscrypt_rhadamanthys_stop

General

Target
2026-08-24_4402f33fb5239b46fad1fbdfcba9fabe_elex_manuscrypt_rhadamanthys_stop
Size 172KB
Sample260825-rtpmraar8s
SHA256 9103c229d7f9a95c9c5367d6bde50b2374ad6ec2eb34f9b706fe26846371fdd4
MD5 4402f33fb5239b46fad1fbdfcba9fabe
SHA1 eb4946e497c91c6d51fd47d1202f4ea1de8f3397
SHA512 ee012dc89cf935ad0c67061db1a8505e814c4d50bb4c9aad283b57090144bb534040f7a85275de9ae91e3d84ee9497e4c4dd9972444ae6ead451a19582afff39
SSDEEP 3072:jHBoC23yTx6xBtvgYN80bMy+5cW6cHbu1He3WT1yTwoKtvfoAZuGvN:w3yTutIE9WBHbeKWT1CwoKtvQAZuS
TLSH
T12304DF1078E1C0B2D42605728C5ACB8A9B7EFC136F71DDD7BBD41A5E1E622C09637BA1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-24_4402f33fb5239b46fad1fbdfcba9fabe_elex_manuscrypt_rhadamanthys_stop

File Explorer

2026-08-24_4402f33fb5239b46fad1fbdfcba9fabe_elex_manuscrypt_rhadamanthys_stop

.exe 172KB

2026-08-24_4402f33fb5239b46fad1fbdfcba9fabe_elex_manuscrypt_rhadamanthys_stop

IMPHASH 1bc8a8ab15f37dfcacba988951c15280
SHA256 9103c229d7f9a95c9c5367d6bde50b2374ad6ec2eb34f9b706fe26846371fdd4
MD5 4402f33fb5239b46fad1fbdfcba9fabe
SHA1 eb4946e497c91c6d51fd47d1202f4ea1de8f3397
SHA512 ee012dc89cf935ad0c67061db1a8505e814c4d50bb4c9aad283b57090144bb534040f7a85275de9ae91e3d84ee9497e4c4dd9972444ae6ead451a19582afff39
SSDEEP 3072:jHBoC23yTx6xBtvgYN80bMy+5cW6cHbu1He3WT1yTwoKtvfoAZuGvN:w3yTutIE9WBHbeKWT1CwoKtvQAZuS
TLSH
T12304DF1078E1C0B2D42605728C5ACB8A9B7EFC136F71DDD7BBD41A5E1E622C09637BA1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

27056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetProcAddress GetModuleHandleA GetSystemDirectoryW GetSystemDirectoryA GetACP GetLocaleInfoA GetVersionExA SetLastError CopyFileW GetModuleFileNameA GetModuleFileNameW GetTempFileNameW LoadLibraryA CreateProcessA SetEndOfFile WriteConsoleW GetConsoleOutputCP WriteConsoleA SetFilePointer InitializeCriticalSection FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle GetTempPathW GetWindowsDirectoryW SetFileAttributesW DeleteFileW GetWindowsDirectoryA MultiByteToWideChar WideCharToMultiByte ReadFile CreateFileW CreateFileA GetLastError GetFileSize CloseHandle OutputDebugStringA OutputDebugStringW lstrcpyA GetLocalTime HeapSize Sleep GetStringTypeW GetStringTypeA HeapReAlloc VirtualAlloc GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter VirtualFree HeapCreate HeapDestroy RtlUnwind GetCommandLineA HeapFree HeapAlloc GetProcessHeap GetStartupInfoA GetCPInfo InterlockedIncrement InterlockedDecrement GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection LCMapStringA LCMapStringW ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW

user32

wsprintfA wvsprintfA MessageBoxA wsprintfW

lz32

LZClose LZOpenFileW LZCopy

version

GetFileVersionInfoW VerQueryValueA GetFileVersionInfoSizeW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-24_4402f33fb5239b46fad1fbdfcba9fabe_elex_manuscrypt_rhadamanthys_stop

kernel32

user32

lz32

version

generic