d8c4dea299483442024e25a75e0b7ec335dc2e30206a689a27b32df18a5e8a97

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-24_6556583c8a1246a6bceb70e89c732dfd_elex_maze_rhadamanthys
Size 14.6MB
Sample260424-echrnad17s
SHA256 d8c4dea299483442024e25a75e0b7ec335dc2e30206a689a27b32df18a5e8a97
MD5 6556583c8a1246a6bceb70e89c732dfd
SHA1 e9ad2d9923ffe29c0782c8cd54305bba8f2aca90
SHA512 cbb773d6a33d6a57ee74d274c5fecda7efe7830bee297179b928e0bd6c48a152852ee231bd8a5e2218b2e199c36bcf98fb3415cc33a227eb11f8fa7995b5ea28
SSDEEP 393216:3KBeER394H59Z9iwf3ShRjD/YT7Q7wpxlV8VFPSJW:3voqT6WShR3kEwge0
TLSH
T100F6330AA272C3F3CF6325701B29E64586B3DF0FB2CC598F2F8455A7997F5949868902
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  2026-04-24_6556583c8a1246a6bceb70e89c732dfd_elex_maze_rhadamanthys
- Size 14.6MB
- SHA256 d8c4dea299483442024e25a75e0b7ec335dc2e30206a689a27b32df18a5e8a97
- MD5 6556583c8a1246a6bceb70e89c732dfd
- SHA1 e9ad2d9923ffe29c0782c8cd54305bba8f2aca90
- SHA512 cbb773d6a33d6a57ee74d274c5fecda7efe7830bee297179b928e0bd6c48a152852ee231bd8a5e2218b2e199c36bcf98fb3415cc33a227eb11f8fa7995b5ea28
- SSDEEP 393216:3KBeER394H59Z9iwf3ShRjD/YT7Q7wpxlV8VFPSJW:3voqT6WShR3kEwge0
- TLSH
  T100F6330AA272C3F3CF6325701B29E64586B3DF0FB2CC598F2F8455A7997F5949868902
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/FileInfo.dll
- Size 586KB
- SHA256 0fa21e2b2701f197aed12f4dc77dac17f81bf2b386a3aa7f55785d03c834152f
- MD5 2942aebef156bd2ccc4e517ea7166061
- SHA1 5434ae68f006bb632d3649c12d09936f33dc7719
- SHA512 1f70cae91545165eb961fced0a5a5d3aa868eba8c1636a9a93a9a06eef04aaccb65a68cea247ba16f5845fbc6ce0dedda67d50ee170dd3a0d007ee9ef7defcf7
- SSDEEP 12288:Q4o4pKYnOOpovs9Kc0qjvCMbhL03MHMtaoJTDtP8U4cn:Qidnas5h08HM08TDtP8U4i
- TLSH
  T121D47C20B1828176E66E01B0267CEE7E047D3A621B744CD7F3C85B3E5EF49D26631A67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/RCWidgetPlugin.dll
- Size 5.3MB
- SHA256 ec2f5d47211a192f77dc2bfcc508f73a7c4c27073dbbe8e4baab62328985f7e0
- MD5 956e3d29149f3ca3c15c0f40a86db41d
- SHA1 5967050d340b85753f69924cb12fd2570c126c47
- SHA512 815dbf801f0e8ca1dabee613a572ee14413696568f4be14550b1467fa547c8a4ab355a69e6677f5395e7a6503284ae0457b633fad958bbac3d59660bb229d02e
- SSDEEP 98304:C20vzkeiJVLsXphDkwopS1gTDjlU4iL0iKjbR:CzxiJVLsXpFrg/BZiC
- TLSH
  T1DF46F12236478573E9DC06B1982EFE9F217A77600B6048EBE3C81DAE55705C35632FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 27KB
- SHA256 57947a15ad3215185c7e15a5f0da393570845a13ab7b184a07fcefbf97537e48
- MD5 a568feaa357f44dd50c5e447fa8ee1b2
- SHA1 5c765fad342b756d5ea522087c6f7567b5f3ed57
- SHA512 7c8c36c0123de839e677beeba65c1af56c5e85d8f1ff2c94950aed33e026dff3fbda8c49859012862110117977c928b814c0d91c477583a2b8f83d73f3cdf174
- SSDEEP 384:ixoXlBT3SaMINWf52+4kb1VunYPLb2O1MnnDGaO5C8JN77hh+uA:iypSvIWb3Jko/MnDGxP3hoF
- TLSH
  T111C23B819B252CF2EAC6893931E4F5276E30F7E057D6C4E78AA984407EC17D3297C19E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/libcurl_x86.dll
- Size 2.3MB
- SHA256 1c7209e7deda32d3595bbf0ce1e165f3289c1e4bd25d1658e73c7b633cbc1766
- MD5 20d77dd88a936c0fead43cde8ed9b1c4
- SHA1 28e5b3d08651e20fb98621b3bc353345c6f9b198
- SHA512 764e1c9f302cdde86eb1695cc56e2b7e31acc1e391837e7b9b339ce6c29972a50c9780ffd68e6b7eb30ba6c14ee1b4ef23f639483e097f9eb6a36056a0ea32eb
- SSDEEP 49152:M+WPYTlgSY4C4d7h6iZM099CU8SPDsPJIZWq:M+WPYTuSYAd3L+bIsPI
- TLSH
  T1D8B5AE53FF8254B1E9CF41B961EB57BF4E3A5A149328D8D387A228B0DD311D1623E389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $_42_/2345BatchRename.dll
- Size 244KB
- SHA256 554974587748439ca8ee1f0413e748f5cf9760f226ff70acbbb91b77eca57d5d
- MD5 02222c265e091587a2d1b91a6cb45f42
- SHA1 8b3b14978d154a51a7812438c0e9e13c6120f1ad
- SHA512 569a02b404e5a7ca6f3b391f1465ba8e48193877d085a74eef5a60bf6d5dd243bdf128d63973567efb7e35b6cc05923049bd3b70b3acbbaa394f529ffbc0ff9e
- SSDEEP 3072:DHXNn293huaTiZwk4ZFTQFEWfwtbyPIEJW3lXrPvo/r6wDX859icN5uI:D929RdTi2kkTQctbywEuVPvbwgiyuI
- TLSH
  T15E34F9277A694DA9D967E1395593CE42F2B738191F31CBCB0390523D1FBB6E0AD39220
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  $_42_/2345EditorApp.dll
- Size 3.8MB
- SHA256 8ab1edb79d4a0c9151ac679003ff52bc8a8ef5e953fb7a9f97739ce8b9fec3f5
- MD5 47583e40d05f5a0a6434c9f8d79917ab
- SHA1 fe1298dd8c71dcb88420b028ab49e714d41ee215
- SHA512 9990795b106cefda68f4e38fe98dfaaefe89c601b2f297e3351db2235de01bc0e8240994ddf1a28be130f88efe685f9a3e57ab21c5a5bab060cd446b40b049a4
- SSDEEP 49152:lgB9qidg3TFBfcH2K9jzr/j83pzj4tjkXWLPdTvYHmj5hwyjMrMe59uLLQ:GyBfcp9no4iXHwKQMrr9MM
- TLSH
  T1CE069F2BAAA901ACC167C278559B8E43F3F274451B3197CF0294466E2F77BE14E7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  $_42_/2345Image.dll
- Size 3.1MB
- SHA256 d12fc67dfc9d0747b9aaeed3be43958732858097a441bfb462c862fade29ad66
- MD5 30eb0457fc9256cbfbed563042bbb326
- SHA1 de7a1c21d90254312a8fa188908ac3912d7a22d6
- SHA512 ebf71b53231f39a6d865f4a2817f94b14c12fe1a951355d107ca98ae0216c3018ae222c2913c75599ed05ad95849ecf399f93d40af0acfd18d966b0eb949d5ac
- SSDEEP 49152:SU+rjR+9x0hmB//1jibGxa+zXVFL6/O5hsipq2txK1Tmsycj7y:S0BXUbPhyK/O
- TLSH
  T120E59D06FAE554D9C477C03889ABA247F7B230051B119BF741949A393F23BE11EBB396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  $_42_/2345ImageApp.dll
- Size 6.4MB
- SHA256 0e1f116056de486fb3e1acc3a71058ebfd93fec616597d782a1c7be566f77dca
- MD5 4cf8b43755c14dd0d166ff5bdef33af8
- SHA1 9b59cc4ad50e5f6502dff2bebfc40c125a35f6d4
- SHA512 bb1aebc9c237288e0b86e50656ce24ab064bfefdc1bdd2f1ad1852ea11b6c6ca0807ccba2e7dbda396a0a40f0edcd22ed7e5fd217a1517fb161d0ef6d423e4df
- SSDEEP 98304:WuUmMEYjzGRrW8g8UfHDj/r1k8ezJnxp7VlaRk:WuUPjIg8UfHDj/r1k8elnmk
- TLSH
  T15C666C17B5A901ACC167D278559BCE43F2F274451B314ADB329C467E2FBBBE08D3A221
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  $_42_/2345ImageCapture.dll
- Size 375KB
- SHA256 00b2a61ab4908565edce2f8b2ea7c3d50ae9086703e192e77b74eee8bc729976
- MD5 84365194b2d4b74ccbf97b1cd68dcafa
- SHA1 d162709adc8dc59e19d5ba1d188b4bd2ce8fad13
- SHA512 a1d91a125581f10911fe3af29fb468018d939febc030de24af2edba016dbd65ac512c78ef0dd7b5ec6ffb93dbfce1df647927b63f2131b390b00213cbdab8045
- SSDEEP 3072:NDsPtP3bb4OKwmE+w0zITaChb0Ou9DX/ek+ZEB8AUcFqTApvigUOXxCk/:NDsPBb4Lw9+wP2YA1jFNFzv75hCk/
- TLSH
  T1F184C31676D88464D916C1F4CC1BA99DA1E23C023F1385AF2EE0BB7F9EB7390352E615
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  $_42_/2345PdfApp.dll
- Size 2.6MB
- SHA256 f2b1c9534588eee43a140040baa62cb7642c5453b741ee91c4da6733f76ee1bf
- MD5 002475d10fc4db81b0c8548da580536f
- SHA1 79e8ddb33ea78324e417f0e515912cbdbb47b4ce
- SHA512 08300ea41434fce407efaf251eb7dfe98f907490ccffc24bd1681c5ca63853ba82c10bc85073db8030d9f2e097bb575ad0f6b1d2c8be59002703ea604de91776
- SSDEEP 49152:CTj6Nj552jyr5UtwRI+knTRcxwfNNBhF9WTVAXozUHTTrfXAwkTYMM:CthnTRcxwfN3hF91AwfMM
- TLSH
  T1D0C55C16AAA941FCC29FC23861878E5BF2F238095F3556DF025015AD2FB7BE14E7D221
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  $_42_/2345PrinterApp.dll
- Size 1.7MB
- SHA256 45b0395bcf26f049f129ef1509e274452aa7fff60935ed6832f1e9f7f2a7dc3b
- MD5 b00e4e07ed362f4cb5740a5d464dc53e
- SHA1 4a48e68e12e7bcaa6a6cc49ec1f2d68926af3b6d
- SHA512 7015e3b32abcff652433d55f652c64dcbdb2105abd7a93c6b166449d6b6c3bfb062c2a020f3250b7f863c6a54318533d12cafbb5e64e0dfaf7d30ee3e2715338
- SSDEEP 24576:huuIuvbQGWDV2Ll51jMvuFVKhXAzPpgn1S+xStonTAcE+WNKAKX7JUlfhBC:gCboV2Ll7jMvKVKhQbuSKnTAcOKARfhE
- TLSH
  T1CD854B167AA946A8C26FD23995D78D43F3B634050F719BDF02A0467E2F77BE04E39212
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  $_42_/FreeImage.dll
- Size 7.7MB
- SHA256 b23b836032b19b10cc0211847b30f7fdffa1f5541b0e6021c60684640035c463
- MD5 f95a402f0264377b17b48d20bbb73b0c
- SHA1 d9d255d435b5876e51db2a065d9fede06ea580b9
- SHA512 8225c5e7604422242283b918a1c7557305563c6ebdf46bdc336f5566f0f332bd63393275b27b098b06f0eea92a3ff1b03967f1caee97ace954c43d66d4254770
- SSDEEP 49152:AuJgs6CjOdawILJLG8bLOg/1wWPQeAZZiycwypWnm/Nwk/ssv3AQcU+MiPDTia+p:SsNhfCWl/GUBqT1s0CK37Tk+OqyF
- TLSH
  T11E864A12E7A10DE6C4638074C9A6A722C7A67C780BF007F36761AAED79377D0353A746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  $_42_/FreeImagePlus.dll
- Size 69KB
- SHA256 5bcaf0470f382cc6fd653a2117d2be2fa494ea08241ed0a9723f2f1c7586d971
- MD5 9b96ce3a69202c6e57f0e04e30c7ca22
- SHA1 6badec1d821dcf4b06ff92d17e08f1f892cb7348
- SHA512 a00da8d290a50ea081f575936b75d9875cdc71a0a59d681b8488ef46fb312649a0c943932e1908696adf414fee877ab7f23b93b6adffff901c7f75845477131a
- SSDEEP 768:2mrAtOt+b2VbV/a95ha3BxPdTyCi7sg2LPplH/DhngGt+++GIHF+Lm6j7/gBcaeV:2m+bWH/X+++H+Lm6Hgj8KYO501
- TLSH
  T1A663194BEBB94481E4768B367CD5C645DCB279129B168BEF074D834C5B037C2287B3AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  2345BatchRename.dll
- Size 244KB
- SHA256 554974587748439ca8ee1f0413e748f5cf9760f226ff70acbbb91b77eca57d5d
- MD5 02222c265e091587a2d1b91a6cb45f42
- SHA1 8b3b14978d154a51a7812438c0e9e13c6120f1ad
- SHA512 569a02b404e5a7ca6f3b391f1465ba8e48193877d085a74eef5a60bf6d5dd243bdf128d63973567efb7e35b6cc05923049bd3b70b3acbbaa394f529ffbc0ff9e
- SSDEEP 3072:DHXNn293huaTiZwk4ZFTQFEWfwtbyPIEJW3lXrPvo/r6wDX859icN5uI:D929RdTi2kkTQctbywEuVPvbwgiyuI
- TLSH
  T15E34F9277A694DA9D967E1395593CE42F2B738191F31CBCB0390523D1FBB6E0AD39220
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  2345EditorApp.dll
- Size 3.8MB
- SHA256 8ab1edb79d4a0c9151ac679003ff52bc8a8ef5e953fb7a9f97739ce8b9fec3f5
- MD5 47583e40d05f5a0a6434c9f8d79917ab
- SHA1 fe1298dd8c71dcb88420b028ab49e714d41ee215
- SHA512 9990795b106cefda68f4e38fe98dfaaefe89c601b2f297e3351db2235de01bc0e8240994ddf1a28be130f88efe685f9a3e57ab21c5a5bab060cd446b40b049a4
- SSDEEP 49152:lgB9qidg3TFBfcH2K9jzr/j83pzj4tjkXWLPdTvYHmj5hwyjMrMe59uLLQ:GyBfcp9no4iXHwKQMrr9MM
- TLSH
  T1CE069F2BAAA901ACC167C278559B8E43F3F274451B3197CF0294466E2F77BE14E7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32