General

  • Target
    2026-10-19_5ac55a79bd67a33f1b42403123a28bbe_elex_hiddentear_manuscrypt_remcos_rhadamanthys_stop
  • Size 449KB
  • Sample261020-x75tsada34
  • SHA256 6b1079edf75857c1e904a650699d7a679a1789b0affa5ec63328193af7ba2a0a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-19_5ac55a79bd67a33f1b42403123a28bbe_elex_hiddentear_manuscrypt_remcos_rhadamanthys_stop
    • Size 449KB
    • SHA256 6b1079edf75857c1e904a650699d7a679a1789b0affa5ec63328193af7ba2a0a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies visibility of hidden/system files in Explorer

    • Executes dropped EXE

    • Adds Run key to start application

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks