General
- Target 2026-05-29_90ada7e8ef327131047a70175ea26317_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader
- Size 118KB
- Sample260529-tywb7sbs8r
- SHA256 682d774631565d51b80ec3fd928aa79d569a12fb60aa1b30cafe5eae9f977575
- MD5 90ada7e8ef327131047a70175ea26317
- SHA1 a14bbde507ecb22ac01d5bd1c07de590cb94c899
- SHA512 0faf8efa2f83773559cba90cdab07d361ff630f10649786758f4edc7290fbcacf47f2150c2c219f02a6e63dbc3ec367654e0800abf870c5a4de79f26a5aa3c53
- SSDEEP 1536:PF+Y+b/DvnTIYe1Hz/bDkTlVMRXbIgiv10qGFDS57FRFc5nb4pYsWjcd0b78nVd8:9+aTDFBI/t5GGSU0b783C
- TLSH T183C37C0176E08231F5B3027519B8AA714AFEFD390A749D9B7390854F49B06D1AB3AF73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-29_90ada7e8ef327131047a70175ea26317_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_90ada7e8ef327131047a70175ea26317_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader
- Size 118KB
- SHA256 682d774631565d51b80ec3fd928aa79d569a12fb60aa1b30cafe5eae9f977575
- MD5 90ada7e8ef327131047a70175ea26317
- SHA1 a14bbde507ecb22ac01d5bd1c07de590cb94c899
- SHA512 0faf8efa2f83773559cba90cdab07d361ff630f10649786758f4edc7290fbcacf47f2150c2c219f02a6e63dbc3ec367654e0800abf870c5a4de79f26a5aa3c53
- SSDEEP 1536:PF+Y+b/DvnTIYe1Hz/bDkTlVMRXbIgiv10qGFDS57FRFc5nb4pYsWjcd0b78nVd8:9+aTDFBI/t5GGSU0b783C
- TLSH T183C37C0176E08231F5B3027519B8AA714AFEFD390A749D9B7390854F49B06D1AB3AF73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1