General
- Target 2026-09-02_9bfd6f4e385f730dd5076c39839abbf6_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- Sample260902-xpz6ks1amd
- SHA256 47a10101e5201b92fa708b9c27531b85c76edf062ecc10e78de67bef65bd3245
- MD5 9bfd6f4e385f730dd5076c39839abbf6
- SHA1 03ae5fd6be8430c4de678408c4556b7acccd0c86
- SHA512 40be56bdea2c831915a04b6845a532c8a3edbf8c6775502529e35164283a1df8b3444e384e14efcd9a0c018d9eab31b65af5e0ec897d54486b99a7dd3047a8e8
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mhtX:jvSMxzKuN0m9G36xN9G36xttgX
- TLSH T190B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-02_9bfd6f4e385f730dd5076c39839abbf6_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-02_9bfd6f4e385f730dd5076c39839abbf6_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-02_9bfd6f4e385f730dd5076c39839abbf6_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- SHA256 47a10101e5201b92fa708b9c27531b85c76edf062ecc10e78de67bef65bd3245
- MD5 9bfd6f4e385f730dd5076c39839abbf6
- SHA1 03ae5fd6be8430c4de678408c4556b7acccd0c86
- SHA512 40be56bdea2c831915a04b6845a532c8a3edbf8c6775502529e35164283a1df8b3444e384e14efcd9a0c018d9eab31b65af5e0ec897d54486b99a7dd3047a8e8
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mhtX:jvSMxzKuN0m9G36xN9G36xttgX
- TLSH T190B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Gepys trojan
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Loads dropped DLL