2026-11-07_5ec363817c942b2e833299d3277ff5b1_elex_manuscrypt_rhadamanthys_silence_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-07_5ec363817c942b2e833299d3277ff5b1_elex_manuscrypt_rhadamanthys_silence_stop
Size 399KB
Sample261107-q3ecpsyxcw
SHA256 c630d20fd34d5185deef00fdb0efefdf301c16e418200d48ff5fffa35cdf09dc
MD5 5ec363817c942b2e833299d3277ff5b1
SHA1 cc688ff234baca92ef31d493a0d46e55928ff25d
SHA512 c753970fcf91a0636d59a3834f57bf58779479d39f9336f76423e1c57fdc04b7987777723c97806cff94f0c310025ff28d4cf29724919f3200ec9e5554461431
SSDEEP 12288:VdEq2hPEZiH7Rey0duJyuVWFBu/CDGkebEg9gM:VdE7EZiH1ey0duJyuVWFBu/CDGkebEgX
TLSH
T194948E2BB3850372C29303B2269E9AD3B73EB975137A85D362A8411D1372EE493773D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-07_5ec363817c942b2e833299d3277ff5b1_elex_manuscrypt_rhadamanthys_silence_stop

File Explorer

2026-11-07_5ec363817c942b2e833299d3277ff5b1_elex_manuscrypt_rhadamanthys_silence_stop

.exe 399KB

2026-11-07_5ec363817c942b2e833299d3277ff5b1_elex_manuscrypt_rhadamanthys_silence_stop

IMPHASH bc8d65d747efa0c4d0902c912ff2f1fe
SHA256 c630d20fd34d5185deef00fdb0efefdf301c16e418200d48ff5fffa35cdf09dc
MD5 5ec363817c942b2e833299d3277ff5b1
SHA1 cc688ff234baca92ef31d493a0d46e55928ff25d
SHA512 c753970fcf91a0636d59a3834f57bf58779479d39f9336f76423e1c57fdc04b7987777723c97806cff94f0c310025ff28d4cf29724919f3200ec9e5554461431
SSDEEP 12288:VdEq2hPEZiH7Rey0duJyuVWFBu/CDGkebEg9gM:VdE7EZiH1ey0duJyuVWFBu/CDGkebEgX
TLSH
T194948E2BB3850372C29303B2269E9AD3B73EB975137A85D362A8411D1372EE493773D5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

57911

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileA FindNextFileA EnterCriticalSection LeaveCriticalSection DeleteFileA CreateMutexA GetLastError CloseHandle Sleep CreateDirectoryA WaitForSingleObject TerminateThread GetTickCount CreateFileA WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount ExitProcess SetLastError CreateProcessA CreateToolhelp32Snapshot Process32First Process32Next OpenProcess TerminateProcess IsWow64Process GetCurrentProcess InterlockedDecrement WideCharToMultiByte SetEndOfFile CreateFileW SetEnvironmentVariableA ReadConsoleW WriteConsoleW SetStdHandle LoadLibraryW OutputDebugStringW SetFilePointer HeapReAlloc FreeEnvironmentStringsW GetEnvironmentStringsW GetCurrentProcessId QueryPerformanceCounter GetOEMCP GetACP IsValidCodePage FlushFileBuffers SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP GetFileType GetProcessHeap InterlockedIncrement EncodePointer DecodePointer DeleteCriticalSection MultiByteToWideChar GetStringTypeW lstrlenA LocalFree HeapFree IsDebuggerPresent IsProcessorFeaturePresent CreateThread GetCurrentThreadId ExitThread GetProcAddress LoadLibraryExW GetSystemTimeAsFileTime GetCommandLineA RaiseException RtlUnwind HeapAlloc GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle GetModuleFileNameW GetModuleHandleExW AreFileApisANSI HeapSize

user32

GetForegroundWindow GetShellWindow GetWindowRect GetCursorPos GetSystemMetrics GetDesktopWindow

ole32

CoInitializeSecurity CoCreateInstance CoUninitialize CoSetProxyBlanket CoInitializeEx

oleaut32

SysAllocString SysFreeString VariantClear

ws2_32

send closesocket WSACleanup connect htons gethostbyname socket WSAStartup recv WSAGetLastError

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-07_5ec363817c942b2e833299d3277ff5b1_elex_manuscrypt_rhadamanthys_silence_stop

kernel32

user32

ole32

oleaut32

ws2_32

generic