General
- Target 2026-10-22_6f3ada2af9eaca0f15e03a321aae8e36_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop
- Size 705KB
- Sample261024-k7hyssttcs
- SHA256 8c7a3981c88e37d48205c380819fb2e4ffe0b3a758c7da49a827120250da45b1
- MD5 6f3ada2af9eaca0f15e03a321aae8e36
- SHA1 2230fb133774114666509122580072b98e7c69bb
- SHA512 6394cef1e81d39be87deb9c47a6d1fbae56eac6e3db4a50f47d82b595ac7eadd19478cf031877a472fdd880dab7137b959fbff2399a255230bb485f12be889f8
- SSDEEP 12288:ehAJZFc2ms8jVXXDGQFl5//qc2/3AeM3wNynFxhZPegeBmETz2yYEPwr417:eKZojVXXC8Ac2YV3swxhZPegenZPwC7
- TLSH T194E40221BAC1C073D56A01B14D64D7D9A63DEF300FA494E3B7813B2EAD395C179362A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_6f3ada2af9eaca0f15e03a321aae8e36_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_6f3ada2af9eaca0f15e03a321aae8e36_amadey_elex_manuscrypt_rhadamanthys_smoke-loader_stealc_stop
- Size 705KB
- SHA256 8c7a3981c88e37d48205c380819fb2e4ffe0b3a758c7da49a827120250da45b1
- MD5 6f3ada2af9eaca0f15e03a321aae8e36
- SHA1 2230fb133774114666509122580072b98e7c69bb
- SHA512 6394cef1e81d39be87deb9c47a6d1fbae56eac6e3db4a50f47d82b595ac7eadd19478cf031877a472fdd880dab7137b959fbff2399a255230bb485f12be889f8
- SSDEEP 12288:ehAJZFc2ms8jVXXDGQFl5//qc2/3AeM3wNynFxhZPegeBmETz2yYEPwr417:eKZojVXXC8Ac2YV3swxhZPegenZPwC7
- TLSH T194E40221BAC1C073D56A01B14D64D7D9A63DEF300FA494E3B7813B2EAD395C179362A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1