General
- Target 2026-05-18_722764311d691dbd8d36fd4037b62a6b_bkransomware_elex_maze_rhadamanthys
- Size 1.6MB
- Sample260518-2j57vsdw71
- SHA256 9e599be8fbdf13d26f4019a230c8320e9604536950800e275a15ce568313e5d8
Score
8/10
Malware Config
Targets
-
- Target 2026-05-18_722764311d691dbd8d36fd4037b62a6b_bkransomware_elex_maze_rhadamanthys
- Size 1.6MB
- SHA256 9e599be8fbdf13d26f4019a230c8320e9604536950800e275a15ce568313e5d8
Score8/10Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1