2026-11-09_5b0b768af0a6f0f30495085b8625ad8d_elex_manuscrypt_rhadamanthys_silence_smoke-loader_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-09_5b0b768af0a6f0f30495085b8625ad8d_elex_manuscrypt_rhadamanthys_silence_smoke-loader_stealc_stop
Size 228KB
Sample261110-xfpcqaaa38
SHA256 c008ca46e84d5eb5120c4af72c13511bcf3dc48547db03d783121b979216526e
MD5 5b0b768af0a6f0f30495085b8625ad8d
SHA1 cef5c5898b4fc3789e675850539cc8b13f26247b
SHA512 4d5434891595e5a51b7b1046839dfae93a81e1c25c11bb56043afdc090bcecdbcbab42fd72b59a9e0974aa5672ef00e18229f2bf86d9f61aeeb14652cb4b7bba
SSDEEP 3072:IAT90ZtoeMTDApmnirZRrxrt+Uwb53blCE4Rb4YvQd23:IAT9ctoFDAMQZRrLzE4Rz3
TLSH
T179346A1275C0C0B2E173023102F89BB2567DBD725FAA99EB7B943B8D4A705C19B35B63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-09_5b0b768af0a6f0f30495085b8625ad8d_elex_manuscrypt_rhadamanthys_silence_smoke-loader_stealc_stop

File Explorer

2026-11-09_5b0b768af0a6f0f30495085b8625ad8d_elex_manuscrypt_rhadamanthys_silence_smoke-loader_stealc_stop

.exe 228KB

2026-11-09_5b0b768af0a6f0f30495085b8625ad8d_elex_manuscrypt_rhadamanthys_silence_smoke-loader_stealc_stop

IMPHASH 83b4d9bc0c65c322eeb631d44fed51b2
SHA256 c008ca46e84d5eb5120c4af72c13511bcf3dc48547db03d783121b979216526e
MD5 5b0b768af0a6f0f30495085b8625ad8d
SHA1 cef5c5898b4fc3789e675850539cc8b13f26247b
SHA512 4d5434891595e5a51b7b1046839dfae93a81e1c25c11bb56043afdc090bcecdbcbab42fd72b59a9e0974aa5672ef00e18229f2bf86d9f61aeeb14652cb4b7bba
SSDEEP 3072:IAT90ZtoeMTDApmnirZRrxrt+Uwb53blCE4Rb4YvQd23:IAT9ctoFDAMQZRrLzE4Rz3
TLSH
T179346A1275C0C0B2E173023102F89BB2567DBD725FAA99EB7B943B8D4A705C19B35B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42360

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LeaveCriticalSection CreateDirectoryA EnterCriticalSection DeleteFileA WaitForSingleObject Sleep TerminateProcess ExitProcess GetTickCount InitializeCriticalSectionAndSpinCount GetLastError SetFileAttributesA GetModuleFileNameA CreateMutexA DeleteCriticalSection CloseHandle CreateFileA WriteFile InterlockedDecrement GetCurrentProcess Process32First OpenProcess WideCharToMultiByte CreateProcessA SetLastError Process32Next CreateToolhelp32Snapshot SetEndOfFile CreateFileW SetEnvironmentVariableA LoadLibraryW OutputDebugStringW WriteConsoleW SetStdHandle ReadConsoleW HeapReAlloc GetOEMCP IsValidCodePage SetFilePointer GetACP FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetModuleFileNameW HeapSize GetConsoleMode GetConsoleCP FlushFileBuffers SetFilePointerEx ReadFile AreFileApisANSI GetModuleHandleExW GetProcessHeap GetFileType GetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW InterlockedIncrement EncodePointer DecodePointer MultiByteToWideChar GetStringTypeW lstrlenA LocalFree HeapFree CreateThread GetCurrentThreadId ExitThread GetProcAddress LoadLibraryExW IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind HeapAlloc GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW CompareStringW LCMapStringW

user32

GetCursorPos DispatchMessageA ShowWindow DefWindowProcA CreateWindowExA TranslateMessage PostQuitMessage RegisterClassExA GetMessageA UpdateWindow

ole32

CoSetProxyBlanket CoInitializeSecurity CoInitializeEx CoUninitialize CoCreateInstance

oleaut32

SysAllocString VariantClear SysFreeString

ws2_32

connect WSAStartup WSAGetLastError htons WSACleanup recv send gethostbyname closesocket socket

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-09_5b0b768af0a6f0f30495085b8625ad8d_elex_manuscrypt_rhadamanthys_silence_smoke-loader_stealc_stop

kernel32

user32

ole32

oleaut32

ws2_32

generic