2026-07-01_f96122cd4f3ebf4294b2321256856bc8_amadey_bkransomware_elex_maze_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-01_f96122cd4f3ebf4294b2321256856bc8_amadey_bkransomware_elex_maze_stop
Size 1.2MB
Sample260701-tvgpmsbx2w
SHA256 e678ee1a91f6fc72873f171c1277e07e20f155ff70d42df268e235803e54ede2
MD5 f96122cd4f3ebf4294b2321256856bc8
SHA1 04d8832e76ab139b5d4618d23fe4b3f8b747003a
SHA512 6202f5e8c7b82a4fee6dd412833ab4b895d0fdce8413d8acf56bad52f30322c728044bf9edfdd144fe6a0e610dea23be8565acd6113847f1762ec11f5eb40af2
SSDEEP 24576:m+MK/Rjd9rRoNk7BZp94/izRXTOkMtrIceMaFPjkjD29:m+njd9rRokp9akOElMaFLk
TLSH
T198459E10B6908433E5B711704B69A7247769BE310B25A5EB73847F4D2EB06F2AF3532B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-01_f96122cd4f3ebf4294b2321256856bc8_amadey_bkransomware_elex_maze_stop

File Explorer

2026-07-01_f96122cd4f3ebf4294b2321256856bc8_amadey_bkransomware_elex_maze_stop

.exe 1.2MB

2026-07-01_f96122cd4f3ebf4294b2321256856bc8_amadey_bkransomware_elex_maze_stop

IMPHASH 962619d92d1a3c2ccccb32f6810c20cf
SHA256 e678ee1a91f6fc72873f171c1277e07e20f155ff70d42df268e235803e54ede2
MD5 f96122cd4f3ebf4294b2321256856bc8
SHA1 04d8832e76ab139b5d4618d23fe4b3f8b747003a
SHA512 6202f5e8c7b82a4fee6dd412833ab4b895d0fdce8413d8acf56bad52f30322c728044bf9edfdd144fe6a0e610dea23be8565acd6113847f1762ec11f5eb40af2
SSDEEP 24576:m+MK/Rjd9rRoNk7BZp94/izRXTOkMtrIceMaFPjkjD29:m+njd9rRokp9akOElMaFLk
TLSH
T198459E10B6908433E5B711704B69A7247769BE310B25A5EB73847F4D2EB06F2AF3532B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

46171

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\obj-firefox\toolkit\mozapps\update\updater\updater.pdb

kernel32

FindClose FindNextFileW CloseHandle LocalFree FreeLibrary GetCurrentProcess SetLastError GetDriveTypeW GetPrivateProfileStringW WriteFile GetTimeZoneInformation WriteConsoleW LCMapStringW GetLongPathNameW OutputDebugStringW FlushFileBuffers SetEnvironmentVariableA SetFilePointerEx HeapSize GetFullPathNameW TlsFree TlsSetValue GetTempPathW GetLastError CreateFileW GetFileAttributesW FormatMessageW CopyFileW WideCharToMultiByte OpenProcess WaitForSingleObject MoveFileExW CreateProcessW SetEndOfFile SetFilePointer FindFirstFileW GetTempFileNameW DeactivateActCtx MultiByteToWideChar GetModuleFileNameW Sleep ActivateActCtx CreateActCtxW GetProcAddress GetSystemDirectoryW GetModuleHandleW SetDllDirectoryW CompareStringW LoadLibraryExW TlsGetValue TlsAlloc TerminateProcess InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter UnhandledExceptionFilter RaiseException LoadLibraryExA GetCommandLineW HeapFree HeapAlloc FileTimeToLocalFileTime GetFileInformationByHandle GetFileType PeekNamedPipe FileTimeToSystemTime IsDebuggerPresent IsProcessorFeaturePresent GetFileAttributesExW SetFileAttributesW EnterCriticalSection LeaveCriticalSection CreateDirectoryW RemoveDirectoryW FindFirstFileExW SystemTimeToTzSpecificLocalTime DeleteFileW EncodePointer DecodePointer CreateThread GetCurrentThreadId ExitThread SetEnvironmentVariableW SetCurrentDirectoryW GetCurrentDirectoryW ReadFile HeapReAlloc ExitProcess GetModuleHandleExW GetProcessHeap GetStdHandle DeleteCriticalSection GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW RtlUnwind IsValidCodePage GetACP GetOEMCP GetCPInfo GetStringTypeW GetConsoleCP GetConsoleMode SetStdHandle ReadConsoleW

user32

wsprintfW SetTimer ScreenToClient GetWindowRect DrawTextW DialogBoxParamW GetParent GetDC LoadIconW OffsetRect GetWindowLongW ReleaseDC GetDlgItem SetWindowLongW EndDialog GetDesktopWindow SetWindowPos SendMessageW SetWindowTextW CopyRect GetClientRect

gdi32

SelectObject

advapi32

CryptDestroyKey QueryServiceConfigW OpenSCManagerA QueryServiceStatusEx StartServiceW OpenServiceW CloseServiceHandle AdjustTokenPrivileges LookupPrivilegeValueA GetTokenInformation OpenProcessToken CryptHashData CryptDestroyHash CryptCreateHash CryptAcquireContextA CryptReleaseContext CryptGetHashParam RegSetValueExW RegCloseKey RegOpenKeyExW RegQueryValueExW RegCreateKeyExW CryptVerifySignatureA

shell32

ShellExecuteExW

shlwapi

PathRemoveFileSpecW PathStripToRootW PathCommonPrefixW PathAppendW PathUnquoteSpacesW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-01_f96122cd4f3ebf4294b2321256856bc8_amadey_bkransomware_elex_maze_stop

kernel32

user32

gdi32

advapi32

shell32

shlwapi

generic