2026-09-01_667b33775cf2da314354d269f921e670_elex_manuscrypt_rhadamanthys_silence_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-01_667b33775cf2da314354d269f921e670_elex_manuscrypt_rhadamanthys_silence_stealc_stop
Size 223KB
Sample260903-mrrbcafm6s
SHA256 1351332f4de5d1f83502a45ac335821ab4d3342c139c3a4086fe2dab3a625215
MD5 667b33775cf2da314354d269f921e670
SHA1 e6a3b07fa85b56d19ac10f72e44133c3001469f2
SHA512 bc449795992c25c8f8dcec9b7857aeea8f9bd2f5a4bf1d905dc4321ff169707f9a2c3ac00f228414fe5ffae9d842c1b8add92a0ef3d57d34d9c63c4bfc36c619
SSDEEP 3072:dFMS4gx0h0LEyAmQkwpoLqpRY5g2YL+ikQCZf/hsnaen4:JdK9PlfAhcuZHa7n
TLSH
T1FE247B107A82C072D2B302710AF8DBB6997DBDB24F669DCBA7D40B5D0A701C19B35B67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-01_667b33775cf2da314354d269f921e670_elex_manuscrypt_rhadamanthys_silence_stealc_stop

File Explorer

2026-09-01_667b33775cf2da314354d269f921e670_elex_manuscrypt_rhadamanthys_silence_stealc_stop

.exe 223KB

2026-09-01_667b33775cf2da314354d269f921e670_elex_manuscrypt_rhadamanthys_silence_stealc_stop

IMPHASH e48f6fa8df0deaca12a896666201a709
SHA256 1351332f4de5d1f83502a45ac335821ab4d3342c139c3a4086fe2dab3a625215
MD5 667b33775cf2da314354d269f921e670
SHA1 e6a3b07fa85b56d19ac10f72e44133c3001469f2
SHA512 bc449795992c25c8f8dcec9b7857aeea8f9bd2f5a4bf1d905dc4321ff169707f9a2c3ac00f228414fe5ffae9d842c1b8add92a0ef3d57d34d9c63c4bfc36c619
SSDEEP 3072:dFMS4gx0h0LEyAmQkwpoLqpRY5g2YL+ikQCZf/hsnaen4:JdK9PlfAhcuZHa7n
TLSH
T1FE247B107A82C072D2B302710AF8DBB6997DBDB24F669DCBA7D40B5D0A701C19B35B67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

54142

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileA FindNextFileA EnterCriticalSection LeaveCriticalSection DeleteFileA Sleep CreateDirectoryA WaitForSingleObject GetTickCount CreateFileA WriteFile CloseHandle CreateMutexA GetLastError GetModuleFileNameA InitializeCriticalSectionAndSpinCount SetFileAttributesA ExitProcess SetLastError CreateProcessA CreateToolhelp32Snapshot Process32First Process32Next OpenProcess TerminateProcess IsWow64Process GetCurrentProcess InterlockedDecrement WideCharToMultiByte SetEndOfFile CreateFileW SetEnvironmentVariableA ReadConsoleW WriteConsoleW SetStdHandle LoadLibraryW OutputDebugStringW SetFilePointer HeapReAlloc GetOEMCP IsValidCodePage GetACP FreeEnvironmentStringsW GetEnvironmentStringsW GetCurrentProcessId QueryPerformanceCounter FlushFileBuffers SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP GetFileType GetProcessHeap InterlockedIncrement EncodePointer DecodePointer DeleteCriticalSection MultiByteToWideChar GetStringTypeW lstrlenA LocalFree HeapFree CreateThread GetCurrentThreadId ExitThread GetProcAddress LoadLibraryExW GetSystemTimeAsFileTime IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind HeapAlloc GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle GetModuleFileNameW GetModuleHandleExW AreFileApisANSI HeapSize

user32

GetForegroundWindow GetShellWindow GetWindowRect GetCursorPos GetSystemMetrics GetDesktopWindow

ole32

CoInitializeSecurity CoCreateInstance CoUninitialize CoSetProxyBlanket CoInitializeEx

oleaut32

SysAllocString SysFreeString VariantClear

ws2_32

send closesocket WSACleanup connect htons gethostbyname socket WSAStartup recv WSAGetLastError

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-01_667b33775cf2da314354d269f921e670_elex_manuscrypt_rhadamanthys_silence_stealc_stop

kernel32

user32

ole32

oleaut32

ws2_32

generic