General
- Target 2026-09-11_2f95d74ffd19a5adee24cecdfefc648e_amadey_elex_karagany_manuscrypt_rhadamanthys_smoke-loader_stop
- Size 98KB
- Sample260912-ny6kaaba87
- SHA256 bfe0ff6da699a5c5d34d0d5b34e78f18ba8cef56edc9c602a68bf1d7bbd94b59
- MD5 2f95d74ffd19a5adee24cecdfefc648e
- SHA1 d1726e51db8d203d748e561992b6c120e97cf7fa
- SHA512 73bf3efabbea9eaf3b429aaa05c3704a86f5d95384b271906f9efd21b46be0e2422d96efe38289310872a525c3e26b476c28da3d256e961ac05dc71fc50e2993
- SSDEEP 1536:lC6cykdU1VqmLL3Yp9QWK1sJIiC6jC/tnIzckmyiCqiGxAcUDq:lC6Py8L3YQqIBxWSyiCqiGxAp+
- TLSH T1C8A35A2176E0C472E4B3293288B4CAB15A6EBD7127B491CF73E4167E0F60BC15A36367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-11_2f95d74ffd19a5adee24cecdfefc648e_amadey_elex_karagany_manuscrypt_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-11_2f95d74ffd19a5adee24cecdfefc648e_amadey_elex_karagany_manuscrypt_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-11_2f95d74ffd19a5adee24cecdfefc648e_amadey_elex_karagany_manuscrypt_rhadamanthys_smoke-loader_stop
- Size 98KB
- SHA256 bfe0ff6da699a5c5d34d0d5b34e78f18ba8cef56edc9c602a68bf1d7bbd94b59
- MD5 2f95d74ffd19a5adee24cecdfefc648e
- SHA1 d1726e51db8d203d748e561992b6c120e97cf7fa
- SHA512 73bf3efabbea9eaf3b429aaa05c3704a86f5d95384b271906f9efd21b46be0e2422d96efe38289310872a525c3e26b476c28da3d256e961ac05dc71fc50e2993
- SSDEEP 1536:lC6cykdU1VqmLL3Yp9QWK1sJIiC6jC/tnIzckmyiCqiGxAcUDq:lC6Py8L3YQqIBxWSyiCqiGxAp+
- TLSH T1C8A35A2176E0C472E4B3293288B4CAB15A6EBD7127B491CF73E4167E0F60BC15A36367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables calling ClearMyTracksByProcess
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.