General
- Target 2026-07-02_e23bea998e60be0ffa660ff4aa7b7442_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- Sample260702-try5hshv91
- SHA256 40478cbb5116ccf26a8a25731c67be79988276cb93386327d8f230b9cae213d2
- MD5 e23bea998e60be0ffa660ff4aa7b7442
- SHA1 1e596c2beb51af6d3c6c727c496cdbccbce60e74
- SHA512 fb2a46fa8af3dfbf397f74a934e6c8b4485722dede74d664b129d78322638b3787dfe3777e9883c1f3f0de4ea44ba05c40f3fb97f0cd4f863b7627cd4ec108dd
- SSDEEP 98304:DqEjYoecA5GbnJjEbXHZnXfXdw+0uWqcEQPbWOsdzo:2EjYo65KJjEz0uuIrzo
- TLSH T17EF533632A42887DD4A78BBE486A7E11C27BBE7B1EF4D54B07D414DD069E1D00E2CE27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_e23bea998e60be0ffa660ff4aa7b7442_bkransomware_elex_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_e23bea998e60be0ffa660ff4aa7b7442_bkransomware_elex_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_e23bea998e60be0ffa660ff4aa7b7442_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- SHA256 40478cbb5116ccf26a8a25731c67be79988276cb93386327d8f230b9cae213d2
- MD5 e23bea998e60be0ffa660ff4aa7b7442
- SHA1 1e596c2beb51af6d3c6c727c496cdbccbce60e74
- SHA512 fb2a46fa8af3dfbf397f74a934e6c8b4485722dede74d664b129d78322638b3787dfe3777e9883c1f3f0de4ea44ba05c40f3fb97f0cd4f863b7627cd4ec108dd
- SSDEEP 98304:DqEjYoecA5GbnJjEbXHZnXfXdw+0uWqcEQPbWOsdzo:2EjYo65KJjEz0uuIrzo
- TLSH T17EF533632A42887DD4A78BBE486A7E11C27BBE7B1EF4D54B07D414DD069E1D00E2CE27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1