General
- Target 2026-04-20_0852a3734585f7925e6c90ecbbfd0afa_bkransomware_elex_maze
- Size 3.2MB
- Sample260420-pf3lcady2w
- SHA256 9b365079e1512100c45290e7701aa0e2e3df1c214aaad36e878d186240a52ecc
- MD5 0852a3734585f7925e6c90ecbbfd0afa
- SHA1 f61451ba2b777a60e726b2f61dcbc0857e729e48
- SHA512 29d98256135d4b2a149185b06138990953311f6019b99a98174a4bc6bae92c128452acc6ad142cbd657a660ff0b5b24e4ff2db2b5d175ffb34ce166b6e0347b5
- SSDEEP 98304:LYOO7OpIz+3A1SV4RfPvwjXDErLNofmOrskpDx8RnwhI0xVYUKC59Sm7k5y1DY/8:wecOUvIzE6uc8RnwhILtF75y1DkWUrmD
- TLSH T17EF5239032D1E97DF2660979CC28DAFC5666FE52CE721903B1C87F0F35782E3A265A50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-20_0852a3734585f7925e6c90ecbbfd0afa_bkransomware_elex_maze.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_0852a3734585f7925e6c90ecbbfd0afa_bkransomware_elex_maze.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_0852a3734585f7925e6c90ecbbfd0afa_bkransomware_elex_maze
- Size 3.2MB
- SHA256 9b365079e1512100c45290e7701aa0e2e3df1c214aaad36e878d186240a52ecc
- MD5 0852a3734585f7925e6c90ecbbfd0afa
- SHA1 f61451ba2b777a60e726b2f61dcbc0857e729e48
- SHA512 29d98256135d4b2a149185b06138990953311f6019b99a98174a4bc6bae92c128452acc6ad142cbd657a660ff0b5b24e4ff2db2b5d175ffb34ce166b6e0347b5
- SSDEEP 98304:LYOO7OpIz+3A1SV4RfPvwjXDErLNofmOrskpDx8RnwhI0xVYUKC59Sm7k5y1DY/8:wecOUvIzE6uc8RnwhILtF75y1DkWUrmD
- TLSH T17EF5239032D1E97DF2660979CC28DAFC5666FE52CE721903B1C87F0F35782E3A265A50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries and memory artifacts referencing sandbox product IDs
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.