2026-11-09_9ecc106fdc0859feeafcd030aceb05f2_elex_manuscrypt_rhadamanthys_stop

General

Target
2026-11-09_9ecc106fdc0859feeafcd030aceb05f2_elex_manuscrypt_rhadamanthys_stop
Size 183KB
Sample261109-22txjsfs3s
SHA256 f632908e7d487ae16bc53fb683c01dd73a966fd2b5210d4d1be095de6a2c9bf4
MD5 9ecc106fdc0859feeafcd030aceb05f2
SHA1 3186fa88f18e51f2e912ef7cd11c3b11c7a8930d
SHA512 7a5ae167d8d0ab2aa466a5fc44fdbaf5437555ce81642cd7f31ac961febb8b12177663cebeb57dc233670d2dd4c9d1a2b9e4034ccacc608a08462d9c584c4df0
SSDEEP 3072:rtORn2enrKzbxJywwjMo5j3RdA09hsZVggjcGkNIVqIz52:RLZzbdUZjAJb7ITsqn
TLSH
T1AF04ADC176E1C072C1A37AF898619BA04E3BF962DB34454B337857AF7F762C05A26316
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-09_9ecc106fdc0859feeafcd030aceb05f2_elex_manuscrypt_rhadamanthys_stop

File Explorer

2026-11-09_9ecc106fdc0859feeafcd030aceb05f2_elex_manuscrypt_rhadamanthys_stop

.exe 183KB

2026-11-09_9ecc106fdc0859feeafcd030aceb05f2_elex_manuscrypt_rhadamanthys_stop

IMPHASH 06f6b6bb4c21be4bcc66385867e5427f
SHA256 f632908e7d487ae16bc53fb683c01dd73a966fd2b5210d4d1be095de6a2c9bf4
MD5 9ecc106fdc0859feeafcd030aceb05f2
SHA1 3186fa88f18e51f2e912ef7cd11c3b11c7a8930d
SHA512 7a5ae167d8d0ab2aa466a5fc44fdbaf5437555ce81642cd7f31ac961febb8b12177663cebeb57dc233670d2dd4c9d1a2b9e4034ccacc608a08462d9c584c4df0
SSDEEP 3072:rtORn2enrKzbxJywwjMo5j3RdA09hsZVggjcGkNIVqIz52:RLZzbdUZjAJb7ITsqn
TLSH
T1AF04ADC176E1C072C1A37AF898619BA04E3BF962DB34454B337857AF7F762C05A26316
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

11328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nedir_wanehosat\jox-jen.pdb

kernel32

GetLocaleInfoA SetLocalTime ConvertThreadToFiber LoadResource GlobalAddAtomA EndUpdateResourceW GetConsoleAliasA CompareFileTime SetHandleInformation WaitForSingleObject WriteConsoleInputA SetEvent CreateHardLinkA GetEnvironmentStrings GetProcessHandleCount GetVersionExW GetConsoleAliasW HeapValidate GetWriteWatch GetConsoleAliasesW GetProcAddress VirtualAlloc LoadLibraryA LocalAlloc GetCurrentConsoleFont VirtualProtect EnumCalendarInfoExA MultiByteToWideChar GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-09_9ecc106fdc0859feeafcd030aceb05f2_elex_manuscrypt_rhadamanthys_stop

kernel32

generic