General
- Target 2026-08-31_c373de6ad96fff82b8009e7c22ff3383_elex_manuscrypt_rhadamanthys_stop_swisyn
- Size 239KB
- Sample260831-sdjl8shb27
- SHA256 b9da83ca958389911ba1565984f4afd1f53c7569287805516a3ac98ba69ad958
- MD5 c373de6ad96fff82b8009e7c22ff3383
- SHA1 38cec6491d974117068103a2c7e15d225fef196b
- SHA512 d13d35646a64ffd635bc05c04b3643985d51b8f2969a17061c462db0ae27168813fa961ad0891072824cb8e029d87b82c04babaf6130bd0aa0243989eb152abf
- SSDEEP 3072:XVqoCl/YgjxEufVU0TbTyDDalXlJ6itNbL+WZkbjXKg9G:XsLqdufVUNDaDJ6GLEvag9G
- TLSH T16F347D237ED0487AE96149B12CB8E719B92AEE321FA0AD033355770A15B52C376F531F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-31_c373de6ad96fff82b8009e7c22ff3383_elex_manuscrypt_rhadamanthys_stop_swisyn.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-31_c373de6ad96fff82b8009e7c22ff3383_elex_manuscrypt_rhadamanthys_stop_swisyn.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_c373de6ad96fff82b8009e7c22ff3383_elex_manuscrypt_rhadamanthys_stop_swisyn
- Size 239KB
- SHA256 b9da83ca958389911ba1565984f4afd1f53c7569287805516a3ac98ba69ad958
- MD5 c373de6ad96fff82b8009e7c22ff3383
- SHA1 38cec6491d974117068103a2c7e15d225fef196b
- SHA512 d13d35646a64ffd635bc05c04b3643985d51b8f2969a17061c462db0ae27168813fa961ad0891072824cb8e029d87b82c04babaf6130bd0aa0243989eb152abf
- SSDEEP 3072:XVqoCl/YgjxEufVU0TbTyDDalXlJ6itNbL+WZkbjXKg9G:XsLqdufVUNDaDJ6GLEvag9G
- TLSH T16F347D237ED0487AE96149B12CB8E719B92AEE321FA0AD033355770A15B52C376F531F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Detects executables with modified PE resources using the unpaid version of Resource Tuner
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory