2026-04-24_500a32af7cb4910e7e3e922da440ecfe_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

General

Target
2026-04-24_500a32af7cb4910e7e3e922da440ecfe_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader
Size 119KB
Sample260424-mxv7gsfw7t
SHA256 f3c543fb43f9c4dac5c1840e72899707a4abc5d6d7bba976feff481393c7d6aa
MD5 500a32af7cb4910e7e3e922da440ecfe
SHA1 6d786513a154656b21a80a2ba0529800aee48047
SHA512 f4546fc4cdb72967a245dcb62ea225b248d56aa34f7d14a53241399fd60f9f83e79295dad3459b426385dbf6d12002c88cec68b02dbb0a1ed5a24abd1a5861f6
SSDEEP 1536:AXCO+Mtx8xyULR68lciyuB9bXVc3eAPR7sWjcdavLFF/n1FcSPZVsWy5M:PM8xyQb6eAPSavBFzcSHsWCM
TLSH
T167C3AE4077D1C0B9D5B2537249798F62463DF93A4A708ECB7388158E26B51C29737FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-24_500a32af7cb4910e7e3e922da440ecfe_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

2026-04-24_500a32af7cb4910e7e3e922da440ecfe_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

.exe 119KB

IMPHASH d00612966b67b056a02bd4a7f6d19d4f
SHA256 f3c543fb43f9c4dac5c1840e72899707a4abc5d6d7bba976feff481393c7d6aa
MD5 500a32af7cb4910e7e3e922da440ecfe
SHA1 6d786513a154656b21a80a2ba0529800aee48047
SHA512 f4546fc4cdb72967a245dcb62ea225b248d56aa34f7d14a53241399fd60f9f83e79295dad3459b426385dbf6d12002c88cec68b02dbb0a1ed5a24abd1a5861f6
SSDEEP 1536:AXCO+Mtx8xyULR68lciyuB9bXVc3eAPR7sWjcdavLFF/n1FcSPZVsWy5M:PM8xyQb6eAPSavBFzcSHsWCM
TLSH
T167C3AE4077D1C0B9D5B2537249798F62463DF93A4A708ECB7388158E26B51C29737FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

22595

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths