2026-09-29_427b4fa2d57d45c9c6f17eb8a2f11af2_elex_manuscrypt_rhadamanthys_stop

General

Target
2026-09-29_427b4fa2d57d45c9c6f17eb8a2f11af2_elex_manuscrypt_rhadamanthys_stop
Size 1.4MB
Sample260930-cwn2nscf54
SHA256 a5f4be2fab301558200bc858a2e5992cc09fd7e00b8851f666746ba185cfa21a
MD5 427b4fa2d57d45c9c6f17eb8a2f11af2
SHA1 0d081706e1af791293f33b6ff067b08a456c7e7b
SHA512 f791e0990c3d415704111b242d290a80e6367e5167d24f71d22b9de461661d6eeb60943aaccff9a410f485c525023e54037e700c944ed38af1567077b607a358
SSDEEP 24576:TIENfTBt3byAUHWreGf+jY+JqRp5fl9NJn:MIfltLyvH88YzRp5/NJn
TLSH
T19365020231528072F7590B301951F6D019BAEC3F29E6E85FFA787E39AD712831A3725E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_427b4fa2d57d45c9c6f17eb8a2f11af2_elex_manuscrypt_rhadamanthys_stop

File Explorer

2026-09-29_427b4fa2d57d45c9c6f17eb8a2f11af2_elex_manuscrypt_rhadamanthys_stop

.exe 1.4MB

2026-09-29_427b4fa2d57d45c9c6f17eb8a2f11af2_elex_manuscrypt_rhadamanthys_stop

IMPHASH 1dd417c3fbd53fbff6d4bd1555074928
SHA256 a5f4be2fab301558200bc858a2e5992cc09fd7e00b8851f666746ba185cfa21a
MD5 427b4fa2d57d45c9c6f17eb8a2f11af2
SHA1 0d081706e1af791293f33b6ff067b08a456c7e7b
SHA512 f791e0990c3d415704111b242d290a80e6367e5167d24f71d22b9de461661d6eeb60943aaccff9a410f485c525023e54037e700c944ed38af1567077b607a358
SSDEEP 24576:TIENfTBt3byAUHWreGf+jY+JqRp5fl9NJn:MIfltLyvH88YzRp5/NJn
TLSH
T19365020231528072F7590B301951F6D019BAEC3F29E6E85FFA787E39AD712831A3725E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

19474

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\XunYouBase\output\XYCrashReport.pdb

kernel32

lstrlenW WideCharToMultiByte lstrlenA GetPrivateProfileStringW CloseHandle CreateFileW MultiByteToWideChar FindNextFileW DeleteFileW ReadFile GetModuleFileNameW FindClose GetFileSize FindFirstFileW WaitForSingleObject FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle InitializeCriticalSection LoadLibraryA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitThread GetCurrentThreadId GetLastError CreateThread HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW RaiseException RtlUnwind GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleA GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError ExitProcess Sleep WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc HeapSize LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode InterlockedExchange GetThreadLocale

shlwapi

PathFileExistsW PathRemoveFileSpecW

wininet

InternetOpenW InternetWriteFile HttpSendRequestExW HttpOpenRequestW InternetConnectW InternetCloseHandle HttpEndRequestW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_427b4fa2d57d45c9c6f17eb8a2f11af2_elex_manuscrypt_rhadamanthys_stop

kernel32

shlwapi

wininet

generic