General
- Target 2026-08-25_ed915ec20ec2f3dc238fcfff184971ab_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop
- Size 662KB
- Sample260826-dxd4jayte1
- SHA256 8e912eeaead37fddce601a21efaede8ccd0c3aaea3c36f7507ab980a8048d8d4
- MD5 ed915ec20ec2f3dc238fcfff184971ab
- SHA1 a320c6ff96fc7708ee4d1c5ded9837f61b96916a
- SHA512 4fa6ba5d81a73255974254fd051970dad235f4760f11a1f2b906bb7f2855e2479c9733aea052428c06ee3b6ca0aaec3d096db844fc8049efb8e2707d5efee950
- SSDEEP 12288:PjGrFY7gQoXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kw:arF8JosqjnhMgeiCl7G0nehbGZpbD
- TLSH T180E4137275D1C0B3C45118768695E6699C2BBE329B2448C3FB562AFD9FB07D0CB3A207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_ed915ec20ec2f3dc238fcfff184971ab_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_ed915ec20ec2f3dc238fcfff184971ab_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stop
- Size 662KB
- SHA256 8e912eeaead37fddce601a21efaede8ccd0c3aaea3c36f7507ab980a8048d8d4
- MD5 ed915ec20ec2f3dc238fcfff184971ab
- SHA1 a320c6ff96fc7708ee4d1c5ded9837f61b96916a
- SHA512 4fa6ba5d81a73255974254fd051970dad235f4760f11a1f2b906bb7f2855e2479c9733aea052428c06ee3b6ca0aaec3d096db844fc8049efb8e2707d5efee950
- SSDEEP 12288:PjGrFY7gQoXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kw:arF8JosqjnhMgeiCl7G0nehbGZpbD
- TLSH T180E4137275D1C0B3C45118768695E6699C2BBE329B2448C3FB562AFD9FB07D0CB3A207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1