General
- Target 2026-04-21_b701668f200b722b75c17c8543bfee37_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader
- Size 5.8MB
- Sample260421-ry481abw8w
- SHA256 ddc79520b684260c386899a2af3d45f398b16f5784634d4e7e4f4173e54bea68
- MD5 b701668f200b722b75c17c8543bfee37
- SHA1 b8725daa4b426c154b1a0271afc0c594405db29e
- SHA512 5b310b538dfe31481ebdbd8327c7bd8e245babbe8b691d36c091db6aa14b4e2e157f607884a681397b68d2538912b5a0a5cfd77c54b094df997c697f5bc70466
- SSDEEP 98304:SHwW2ITuKjnJonK/1NIyfs66AqTEz+jPEDrseCNPnjJwP21zrNHWuRNSCbEViNww:SQ3xwOK/0yfJ6An0P4g7Hwe1rwuRNSm9
- TLSH T13A56334577D09225FC2720F68413BA6043267B1CF617F5ABE9CD876B06EE7E11A93283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-04-21_b701668f200b722b75c17c8543bfee37_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-21_b701668f200b722b75c17c8543bfee37_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-21_b701668f200b722b75c17c8543bfee37_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader
- Size 5.8MB
- SHA256 ddc79520b684260c386899a2af3d45f398b16f5784634d4e7e4f4173e54bea68
- MD5 b701668f200b722b75c17c8543bfee37
- SHA1 b8725daa4b426c154b1a0271afc0c594405db29e
- SHA512 5b310b538dfe31481ebdbd8327c7bd8e245babbe8b691d36c091db6aa14b4e2e157f607884a681397b68d2538912b5a0a5cfd77c54b094df997c697f5bc70466
- SSDEEP 98304:SHwW2ITuKjnJonK/1NIyfs66AqTEz+jPEDrseCNPnjJwP21zrNHWuRNSCbEViNww:SQ3xwOK/0yfJ6An0P4g7Hwe1rwuRNSm9
- TLSH T13A56334577D09225FC2720F68413BA6043267B1CF617F5ABE9CD876B06EE7E11A93283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.