General
- Target 2026-08-31_ee48127634a94a30fee0e7afb4c61b1f_elex_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn
- Size 260KB
- Sample260831-qa671ssdrg
- SHA256 e880b7832307f1f5d7c0129e810b6dddd76ca7917ed25eaaf5a8e9d995783ba6
- MD5 ee48127634a94a30fee0e7afb4c61b1f
- SHA1 f65077d251b2708332a185ca79be7aa1ba8364b6
- SHA512 1a34218ec3daf113575a7fa182d7cc253f94551ba9e806e6b256b37e9ee4e46898985be97ff995fbee3d2c59d6e9743f9dc004d903629ee7cb47460f72272f87
- SSDEEP 3072:XVqoCl/YgjxEufVU0TbTyDDalsa3TLsbrR3V9JZtS52KYopz8/:XsLqdufVUNDaTDLKrtV9779opw
- TLSH T15D4408237A00843AE7514BB01855E6E579666D390BE4EC4FF2A6BF352E7128375B320F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-31_ee48127634a94a30fee0e7afb4c61b1f_elex_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-31_ee48127634a94a30fee0e7afb4c61b1f_elex_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_ee48127634a94a30fee0e7afb4c61b1f_elex_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stop_swisyn
- Size 260KB
- SHA256 e880b7832307f1f5d7c0129e810b6dddd76ca7917ed25eaaf5a8e9d995783ba6
- MD5 ee48127634a94a30fee0e7afb4c61b1f
- SHA1 f65077d251b2708332a185ca79be7aa1ba8364b6
- SHA512 1a34218ec3daf113575a7fa182d7cc253f94551ba9e806e6b256b37e9ee4e46898985be97ff995fbee3d2c59d6e9743f9dc004d903629ee7cb47460f72272f87
- SSDEEP 3072:XVqoCl/YgjxEufVU0TbTyDDalsa3TLsbrR3V9JZtS52KYopz8/:XsLqdufVUNDaTDLKrtV9779opw
- TLSH T15D4408237A00843AE7514BB01855E6E579666D390BE4EC4FF2A6BF352E7128375B320F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory