General
- Target 2026-09-09_d96db26cd176e6529f987dec5c2724b8_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- Sample260910-2tjfvaxbmf
- SHA256 5e6dc6d41fdcac3866cfff0234abcce6c7888b0807a34d9ae83f1b21ba2c79c2
- MD5 d96db26cd176e6529f987dec5c2724b8
- SHA1 2af868cb73792dd7e9c8b1fb0c15749a8f233123
- SHA512 72e5672124ca256f14a15bae3c3d01a93b15cbcd39b9681b54d8066cd89e4bb306df87e19844e15fbfe7911c3686df70f0691103f74323c3ee1a1484f19025af
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mht/:jvSMxzKuN0m9G36xN9G36xttg/
- TLSH T146B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_d96db26cd176e6529f987dec5c2724b8_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_d96db26cd176e6529f987dec5c2724b8_elex_manuscrypt_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_d96db26cd176e6529f987dec5c2724b8_elex_manuscrypt_rhadamanthys_stop
- Size 511KB
- SHA256 5e6dc6d41fdcac3866cfff0234abcce6c7888b0807a34d9ae83f1b21ba2c79c2
- MD5 d96db26cd176e6529f987dec5c2724b8
- SHA1 2af868cb73792dd7e9c8b1fb0c15749a8f233123
- SHA512 72e5672124ca256f14a15bae3c3d01a93b15cbcd39b9681b54d8066cd89e4bb306df87e19844e15fbfe7911c3686df70f0691103f74323c3ee1a1484f19025af
- SSDEEP 12288:jvSMIbanzKuN4B1rLs2Iz9GF1/yx7y29GF1/yx7y2tt1mht/:jvSMxzKuN0m9G36xN9G36xttg/
- TLSH T146B4E09372E19877D4B24B731768CD3061FDECA64B60DBAB2EE4F20D06E13A1453C65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Gepys trojan
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Loads dropped DLL