2026-11-03_7c42e4f96a9cdeaa817d49e3d8a43926_elex_manuscrypt_rhadamanthys_silence_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-03_7c42e4f96a9cdeaa817d49e3d8a43926_elex_manuscrypt_rhadamanthys_silence_stealc_stop
Size 223KB
Sample261104-tk1prsdy7j
SHA256 02b1de86fce7dfc707713bc9965dbd41c575dbc805fa69a08528f180fe252d69
MD5 7c42e4f96a9cdeaa817d49e3d8a43926
SHA1 c0607ca2a3cde9e423724b7951b26ee045364e59
SHA512 e16f00119a4ef27b5055506cea128edfecdb1fcfec8f804df7730a2e19ba5f60e10b4762ac695163b5161eaf47c7e0f9be771a033bc55d1c31334d0dd8a51cea
SSDEEP 3072:dFMS4gx0h0LEyAmQkwpoLqpRY5g2YL+ikQCZf/hsnqen4:JdK9PlfAhcuZHarn
TLSH
T162247B107A82C072D2B302710AF8DBB29A7DBDB24F659DCBA7D40B5D0A701D19B35B67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_7c42e4f96a9cdeaa817d49e3d8a43926_elex_manuscrypt_rhadamanthys_silence_stealc_stop

File Explorer

2026-11-03_7c42e4f96a9cdeaa817d49e3d8a43926_elex_manuscrypt_rhadamanthys_silence_stealc_stop

.exe 223KB

2026-11-03_7c42e4f96a9cdeaa817d49e3d8a43926_elex_manuscrypt_rhadamanthys_silence_stealc_stop

IMPHASH e48f6fa8df0deaca12a896666201a709
SHA256 02b1de86fce7dfc707713bc9965dbd41c575dbc805fa69a08528f180fe252d69
MD5 7c42e4f96a9cdeaa817d49e3d8a43926
SHA1 c0607ca2a3cde9e423724b7951b26ee045364e59
SHA512 e16f00119a4ef27b5055506cea128edfecdb1fcfec8f804df7730a2e19ba5f60e10b4762ac695163b5161eaf47c7e0f9be771a033bc55d1c31334d0dd8a51cea
SSDEEP 3072:dFMS4gx0h0LEyAmQkwpoLqpRY5g2YL+ikQCZf/hsnqen4:JdK9PlfAhcuZHarn
TLSH
T162247B107A82C072D2B302710AF8DBB29A7DBDB24F659DCBA7D40B5D0A701D19B35B67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

54142

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileA FindNextFileA EnterCriticalSection LeaveCriticalSection DeleteFileA Sleep CreateDirectoryA WaitForSingleObject GetTickCount CreateFileA WriteFile CloseHandle CreateMutexA GetLastError GetModuleFileNameA InitializeCriticalSectionAndSpinCount SetFileAttributesA ExitProcess SetLastError CreateProcessA CreateToolhelp32Snapshot Process32First Process32Next OpenProcess TerminateProcess IsWow64Process GetCurrentProcess InterlockedDecrement WideCharToMultiByte SetEndOfFile CreateFileW SetEnvironmentVariableA ReadConsoleW WriteConsoleW SetStdHandle LoadLibraryW OutputDebugStringW SetFilePointer HeapReAlloc GetOEMCP IsValidCodePage GetACP FreeEnvironmentStringsW GetEnvironmentStringsW GetCurrentProcessId QueryPerformanceCounter FlushFileBuffers SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP GetFileType GetProcessHeap InterlockedIncrement EncodePointer DecodePointer DeleteCriticalSection MultiByteToWideChar GetStringTypeW lstrlenA LocalFree HeapFree CreateThread GetCurrentThreadId ExitThread GetProcAddress LoadLibraryExW GetSystemTimeAsFileTime IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind HeapAlloc GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle GetModuleFileNameW GetModuleHandleExW AreFileApisANSI HeapSize

user32

GetForegroundWindow GetShellWindow GetWindowRect GetCursorPos GetSystemMetrics GetDesktopWindow

ole32

CoInitializeSecurity CoCreateInstance CoUninitialize CoSetProxyBlanket CoInitializeEx

oleaut32

SysAllocString SysFreeString VariantClear

ws2_32

send closesocket WSACleanup connect htons gethostbyname socket WSAStartup recv WSAGetLastError

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_7c42e4f96a9cdeaa817d49e3d8a43926_elex_manuscrypt_rhadamanthys_silence_stealc_stop

kernel32

user32

ole32

oleaut32

ws2_32

generic