2026-07-01_ac4fa7378f6bd44b225f946255ad7f74_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

General

Target
2026-07-01_ac4fa7378f6bd44b225f946255ad7f74_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader
Size 119KB
Sample260701-xcezwaet21
SHA256 5f9380fd2db8b377d00fab84379480ca5098cd4415c7787c8b7434185139c5a5
MD5 ac4fa7378f6bd44b225f946255ad7f74
SHA1 c0bd911668e433ec76606b33c088e7f8141bc4ae
SHA512 59cfa3d6b2f555b692353515fa0b8585e1b8b9522264bf1252c34d5398ddc4572cd383a9491b3b953f38091f0d68b74a9b6e001d182a81b150a624126cb5836e
SSDEEP 1536:AXCO+Mtx8xyULR68lciyuB9bXVc3eAPR7sWjcdavLFF/n1FcSPZVsWy59:PM8xyQb6eAPSavBFzcSHsWC9
TLSH
T10BC3AE4077D1C0B9D5B2537249B98F62463DF93A4AB08ECB7388158E26B51C29737FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-01_ac4fa7378f6bd44b225f946255ad7f74_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

2026-07-01_ac4fa7378f6bd44b225f946255ad7f74_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

.exe 119KB

IMPHASH d00612966b67b056a02bd4a7f6d19d4f
SHA256 5f9380fd2db8b377d00fab84379480ca5098cd4415c7787c8b7434185139c5a5
MD5 ac4fa7378f6bd44b225f946255ad7f74
SHA1 c0bd911668e433ec76606b33c088e7f8141bc4ae
SHA512 59cfa3d6b2f555b692353515fa0b8585e1b8b9522264bf1252c34d5398ddc4572cd383a9491b3b953f38091f0d68b74a9b6e001d182a81b150a624126cb5836e
SSDEEP 1536:AXCO+Mtx8xyULR68lciyuB9bXVc3eAPR7sWjcdavLFF/n1FcSPZVsWy59:PM8xyQb6eAPSavBFzcSHsWC9
TLSH
T10BC3AE4077D1C0B9D5B2537249B98F62463DF93A4AB08ECB7388158E26B51C29737FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

22595

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths