General
- Target 2026-05-06_8314452ab7b0221d2bc5ac5f7c96fbd9_amadey_bkransomware_elex_icedid_maze_smoke-loader
- Size 1020KB
- Sample260506-vavlfaew91
- SHA256 2f4bb3d59e2cfe4681dc83630cb34d28175a7d76dd54344a6b3e93a301a4c5cf
- MD5 8314452ab7b0221d2bc5ac5f7c96fbd9
- SHA1 2dce114b2ea737e37ef2f43ee1065e283f7a3c03
- SHA512 25534d77c5a1b7be47f50833e0a2d68541d217225dd5ae7c9bb635c64899491b7a0b1f5b6a2cb28343c2ba60517c2b50e9edea14331a2d7ca6b26a5416ff0e7b
- SSDEEP 12288:Q1jffwkovHPGD9hdS7RKZk0ZpuaXeITRC9aYHmrgG65ahFADWk45rwm6wYo:QBffwkovAo7c2CESqGrgMFZ5rj
- TLSH T17625AE0276C5903AE2730331993DA765A2BBBD710935A24773E46F1D1EB85C2EE34B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-06_8314452ab7b0221d2bc5ac5f7c96fbd9_amadey_bkransomware_elex_icedid_maze_smoke-loader.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_8314452ab7b0221d2bc5ac5f7c96fbd9_amadey_bkransomware_elex_icedid_maze_smoke-loader.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_8314452ab7b0221d2bc5ac5f7c96fbd9_amadey_bkransomware_elex_icedid_maze_smoke-loader
- Size 1020KB
- SHA256 2f4bb3d59e2cfe4681dc83630cb34d28175a7d76dd54344a6b3e93a301a4c5cf
- MD5 8314452ab7b0221d2bc5ac5f7c96fbd9
- SHA1 2dce114b2ea737e37ef2f43ee1065e283f7a3c03
- SHA512 25534d77c5a1b7be47f50833e0a2d68541d217225dd5ae7c9bb635c64899491b7a0b1f5b6a2cb28343c2ba60517c2b50e9edea14331a2d7ca6b26a5416ff0e7b
- SSDEEP 12288:Q1jffwkovHPGD9hdS7RKZk0ZpuaXeITRC9aYHmrgG65ahFADWk45rwm6wYo:QBffwkovAo7c2CESqGrgMFZ5rj
- TLSH T17625AE0276C5903AE2730331993DA765A2BBBD710935A24773E46F1D1EB85C2EE34B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.