General
- Target 2026-04-27_333c40c0de67f91f57def869e868fe68_bkransomware_elex_maze
- Size 965KB
- Sample260427-1bb4daas31
- SHA256 4cca35611c00e70df98b5eeaa55ca73b79e708f9f3d105beca2e37cd4344938b
- MD5 333c40c0de67f91f57def869e868fe68
- SHA1 7911afe33ac27f8336855cfe88788ad6c2edb035
- SHA512 21f1b038a07439fd4f97d98dd863166ab950d5c92020d27a1c8d95198e74e3a695005a9af5ee3e21fed57e301202332ea1ebe404d43a0fb99a255ff0ba246757
- SSDEEP 24576:Z3d5DFVHW/HJ/3ThfSSTcUSQj4rOJwnx+9fbeT5SgHD:5rDiJVNhwnx+Bbejj
- TLSH T160256C506FC6C069E3529075D1EAEE19DE28E21C3F2D58C3EFBE1869171C7D92CB6206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-27_333c40c0de67f91f57def869e868fe68_bkransomware_elex_maze.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-27_333c40c0de67f91f57def869e868fe68_bkransomware_elex_maze.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-27_333c40c0de67f91f57def869e868fe68_bkransomware_elex_maze
- Size 965KB
- SHA256 4cca35611c00e70df98b5eeaa55ca73b79e708f9f3d105beca2e37cd4344938b
- MD5 333c40c0de67f91f57def869e868fe68
- SHA1 7911afe33ac27f8336855cfe88788ad6c2edb035
- SHA512 21f1b038a07439fd4f97d98dd863166ab950d5c92020d27a1c8d95198e74e3a695005a9af5ee3e21fed57e301202332ea1ebe404d43a0fb99a255ff0ba246757
- SSDEEP 24576:Z3d5DFVHW/HJ/3ThfSSTcUSQj4rOJwnx+9fbeT5SgHD:5rDiJVNhwnx+Bbejj
- TLSH T160256C506FC6C069E3529075D1EAEE19DE28E21C3F2D58C3EFBE1869171C7D92CB6206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing many IR and analysis tools
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger