2026-05-11_cb7f59484e8bc0dfaec05e294b3282bb_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

General

Target
2026-05-11_cb7f59484e8bc0dfaec05e294b3282bb_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader
Size 119KB
Sample260511-s6y8dsdx2t
SHA256 f8d29f3026aa5271cfe102f55e8054fd3ca18088b0ffa28148bee5c20704f42f
MD5 cb7f59484e8bc0dfaec05e294b3282bb
SHA1 1f9f0f12db7f1a7b0b3b14e5d362ef7c9350aefa
SHA512 fe2e39f59eda1eb2cd31624a8f998f644c431f5173e033b7d13b3849afcb74d77b5c2b0ad518f2b07e9ffe32000794f051003993f3c44af2003b34f704a0e81b
SSDEEP 1536:AXCO+Mtx8xyULR68lciyuB9bXVc3eAPR7sWjcdavLFF/n1FcSPZVsWy56:PM8xyQb6eAPSavBFzcSHsWC6
TLSH
T1CFC3AE4077D1C0B9D5B2537249B98F62463DF93A4AB08ECB7388158E26B51C29737FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-11_cb7f59484e8bc0dfaec05e294b3282bb_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

2026-05-11_cb7f59484e8bc0dfaec05e294b3282bb_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

.exe 119KB

IMPHASH d00612966b67b056a02bd4a7f6d19d4f
SHA256 f8d29f3026aa5271cfe102f55e8054fd3ca18088b0ffa28148bee5c20704f42f
MD5 cb7f59484e8bc0dfaec05e294b3282bb
SHA1 1f9f0f12db7f1a7b0b3b14e5d362ef7c9350aefa
SHA512 fe2e39f59eda1eb2cd31624a8f998f644c431f5173e033b7d13b3849afcb74d77b5c2b0ad518f2b07e9ffe32000794f051003993f3c44af2003b34f704a0e81b
SSDEEP 1536:AXCO+Mtx8xyULR68lciyuB9bXVc3eAPR7sWjcdavLFF/n1FcSPZVsWy56:PM8xyQb6eAPSavBFzcSHsWC6
TLSH
T1CFC3AE4077D1C0B9D5B2537249B98F62463DF93A4AB08ECB7388158E26B51C29737FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

22595

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths