General
- Target 2026-09-09_147b9e60ed9173ef77999c7e8d0b1a9f_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop_swisyn
- Size 288KB
- Sample260909-3z1srascpf
- SHA256 d4da801b4e40cee6d6b4a5700dd71ff05c44ffa79b07254e5c2a152b577d7ba9
- MD5 147b9e60ed9173ef77999c7e8d0b1a9f
- SHA1 9f0f229129bac7d557b6879dc4a496b4ece79e8f
- SHA512 5cb3e4ec1db4b2001fa4f23d0347f907f466cafa8ecf9e305dbf3d3e9daeb89d7591dbd0f2a0e80e8696c044f15b6ade59d8072e2d10c5dc9032c5783fbba400
- SSDEEP 6144:UsLqdufVUNDaNVuEA9OwLy8dTc2msqYedk:PFUNDaNhA1ZFc2ms8dk
- TLSH T1AB547D127E80943BC41289F118A4E75AB939BE310FA19DD77355BB09AD722C3B6F530B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_147b9e60ed9173ef77999c7e8d0b1a9f_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_147b9e60ed9173ef77999c7e8d0b1a9f_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_147b9e60ed9173ef77999c7e8d0b1a9f_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop_swisyn
- Size 288KB
- SHA256 d4da801b4e40cee6d6b4a5700dd71ff05c44ffa79b07254e5c2a152b577d7ba9
- MD5 147b9e60ed9173ef77999c7e8d0b1a9f
- SHA1 9f0f229129bac7d557b6879dc4a496b4ece79e8f
- SHA512 5cb3e4ec1db4b2001fa4f23d0347f907f466cafa8ecf9e305dbf3d3e9daeb89d7591dbd0f2a0e80e8696c044f15b6ade59d8072e2d10c5dc9032c5783fbba400
- SSDEEP 6144:UsLqdufVUNDaNVuEA9OwLy8dTc2msqYedk:PFUNDaNhA1ZFc2ms8dk
- TLSH T1AB547D127E80943BC41289F118A4E75AB939BE310FA19DD77355BB09AD722C3B6F530B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory