2026-08-27_e446f94669042d2ec2145867cb5d1b12_elex_manuscrypt_rhadamanthys_silence_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-27_e446f94669042d2ec2145867cb5d1b12_elex_manuscrypt_rhadamanthys_silence_stealc_stop
Size 223KB
Sample260828-ea9glashqe
SHA256 3cea619ce4797427ab0c08cb63b2ea5ece4bbbf663ef8b6e74f9aacb4cb6f44c
MD5 e446f94669042d2ec2145867cb5d1b12
SHA1 730ee7e38fbe1a4b229c477c436c04521c855bc2
SHA512 5b18ab74a537007f190a42515d7d3100047a5436190227978ba402a00bea814492388deb9b0598ec1d04defd58c50851397499dc82463c0b6f7244ef0c18dc0c
SSDEEP 3072:dFMS4gx0h0LEyAmQkwpoLqpRY5g2YL+ikQCZf/hsnsen4:JdK9PlfAhcuZHaJn
TLSH
T160247B107A82C072D2B302710AF8DBB29A7DBDB24F659DCBA7D40B5D0A701D19B35B67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-27_e446f94669042d2ec2145867cb5d1b12_elex_manuscrypt_rhadamanthys_silence_stealc_stop

File Explorer

2026-08-27_e446f94669042d2ec2145867cb5d1b12_elex_manuscrypt_rhadamanthys_silence_stealc_stop

.exe 223KB

2026-08-27_e446f94669042d2ec2145867cb5d1b12_elex_manuscrypt_rhadamanthys_silence_stealc_stop

IMPHASH e48f6fa8df0deaca12a896666201a709
SHA256 3cea619ce4797427ab0c08cb63b2ea5ece4bbbf663ef8b6e74f9aacb4cb6f44c
MD5 e446f94669042d2ec2145867cb5d1b12
SHA1 730ee7e38fbe1a4b229c477c436c04521c855bc2
SHA512 5b18ab74a537007f190a42515d7d3100047a5436190227978ba402a00bea814492388deb9b0598ec1d04defd58c50851397499dc82463c0b6f7244ef0c18dc0c
SSDEEP 3072:dFMS4gx0h0LEyAmQkwpoLqpRY5g2YL+ikQCZf/hsnsen4:JdK9PlfAhcuZHaJn
TLSH
T160247B107A82C072D2B302710AF8DBB29A7DBDB24F659DCBA7D40B5D0A701D19B35B67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

54142

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileA FindNextFileA EnterCriticalSection LeaveCriticalSection DeleteFileA Sleep CreateDirectoryA WaitForSingleObject GetTickCount CreateFileA WriteFile CloseHandle CreateMutexA GetLastError GetModuleFileNameA InitializeCriticalSectionAndSpinCount SetFileAttributesA ExitProcess SetLastError CreateProcessA CreateToolhelp32Snapshot Process32First Process32Next OpenProcess TerminateProcess IsWow64Process GetCurrentProcess InterlockedDecrement WideCharToMultiByte SetEndOfFile CreateFileW SetEnvironmentVariableA ReadConsoleW WriteConsoleW SetStdHandle LoadLibraryW OutputDebugStringW SetFilePointer HeapReAlloc GetOEMCP IsValidCodePage GetACP FreeEnvironmentStringsW GetEnvironmentStringsW GetCurrentProcessId QueryPerformanceCounter FlushFileBuffers SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP GetFileType GetProcessHeap InterlockedIncrement EncodePointer DecodePointer DeleteCriticalSection MultiByteToWideChar GetStringTypeW lstrlenA LocalFree HeapFree CreateThread GetCurrentThreadId ExitThread GetProcAddress LoadLibraryExW GetSystemTimeAsFileTime IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind HeapAlloc GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle GetModuleFileNameW GetModuleHandleExW AreFileApisANSI HeapSize

user32

GetForegroundWindow GetShellWindow GetWindowRect GetCursorPos GetSystemMetrics GetDesktopWindow

ole32

CoInitializeSecurity CoCreateInstance CoUninitialize CoSetProxyBlanket CoInitializeEx

oleaut32

SysAllocString SysFreeString VariantClear

ws2_32

send closesocket WSACleanup connect htons gethostbyname socket WSAStartup recv WSAGetLastError

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-27_e446f94669042d2ec2145867cb5d1b12_elex_manuscrypt_rhadamanthys_silence_stealc_stop

kernel32

user32

ole32

oleaut32

ws2_32

generic