2026-04-27_5b20cd4778f10dd8462e979f08aa1620_bkransomware_elex_maze_rhadamanthys_smoke-loader

General

Target
2026-04-27_5b20cd4778f10dd8462e979f08aa1620_bkransomware_elex_maze_rhadamanthys_smoke-loader
Size 270KB
Sample260427-e9sywsew8l
SHA256 5a9e551e854b086e32c8b027dc67007b3a66a1e4fba412a7721af07ffbfb3626
MD5 5b20cd4778f10dd8462e979f08aa1620
SHA1 db5298b8f5e52100de3e6a445d1fb1d06cd5a734
SHA512 496b8d9d5cc8b8623ba022c37c4c5ccf31fbf655b930ee979d02ed6b108900a9328ac5656d82d2593812635854aaa79dd8a7b0d43f651c2bf9274ae3b289bfa7
SSDEEP 6144:m53qKtaiXbMudKa8CEYYgIlSFlq1mMDlKeVzT:a357FETtmlq1mMDlKWzT
TLSH
T1AA447B10B2D58071E1B6423B85A7AE5217BAFD224F368FCF1BD84A5D0E753D09B34B92
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-27_5b20cd4778f10dd8462e979f08aa1620_bkransomware_elex_maze_rhadamanthys_smoke-loader

File Explorer

2026-04-27_5b20cd4778f10dd8462e979f08aa1620_bkransomware_elex_maze_rhadamanthys_smoke-loader

.exe 270KB

2026-04-27_5b20cd4778f10dd8462e979f08aa1620_bkransomware_elex_maze_rhadamanthys_smoke-loader

IMPHASH 615a4821d1819ccb150f1a884aaf3612
SHA256 5a9e551e854b086e32c8b027dc67007b3a66a1e4fba412a7721af07ffbfb3626
MD5 5b20cd4778f10dd8462e979f08aa1620
SHA1 db5298b8f5e52100de3e6a445d1fb1d06cd5a734
SHA512 496b8d9d5cc8b8623ba022c37c4c5ccf31fbf655b930ee979d02ed6b108900a9328ac5656d82d2593812635854aaa79dd8a7b0d43f651c2bf9274ae3b289bfa7
SSDEEP 6144:m53qKtaiXbMudKa8CEYYgIlSFlq1mMDlKeVzT:a357FETtmlq1mMDlKWzT
TLSH
T1AA447B10B2D58071E1B6423B85A7AE5217BAFD224F368FCF1BD84A5D0E753D09B34B92
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

12710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\DODO\Downloads\MyFont757894252002\MyFont\Release\MyFont.pdb

kernel32

GetLocaleInfoW LCMapStringW CompareStringW IsValidLocale GetDateFormatW HeapReAlloc HeapSize RtlUnwind GetUserDefaultLCID EnumSystemLocalesW GetStringTypeW FlushFileBuffers GetConsoleCP GetConsoleMode SetStdHandle SetFilePointerEx WriteConsoleW CloseHandle LoadLibraryW GetProcAddress GetTimeFormatW VirtualAlloc HeapAlloc GetCommandLineA IsDebuggerPresent IsProcessorFeaturePresent EncodePointer DecodePointer GetLastError ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetModuleFileNameW GetProcessHeap SetLastError GetCurrentThread GetCurrentThreadId GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount CreateEventW Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount GetModuleHandleW CreateSemaphoreW EnterCriticalSection LeaveCriticalSection FatalAppExitA HeapFree SetConsoleCtrlHandler FreeLibrary LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo OutputDebugStringW CreateFileW

user32

CallWindowProcA PtInRect GetCursorPos GetWindowRect GetClientRect EndPaint BeginPaint ReleaseDC GetDC ShowWindow InvalidateRect GetDlgItemInt SetDlgItemInt GetDlgItem EndDialog SetWindowPos SendMessageA wsprintfA

gdi32

SetTextColor SetBkMode SetBkColor SelectObject GetTextColor GetBkMode GetBkColor EnumFontFamiliesExA DeleteObject CreateFontIndirectA TextOutA

comdlg32

ChooseColorA ChooseFontA

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-27_5b20cd4778f10dd8462e979f08aa1620_bkransomware_elex_maze_rhadamanthys_smoke-loader

kernel32

user32

gdi32

comdlg32

generic