General
- Target 2026-07-02_abe8126e9682c9775ac4efaec8f74d6a_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- Sample260702-vcja7afs7q
- SHA256 c7f9b37f850ab44644a4075c556a2febe2703a6419371977aa3c9ed03074ec41
- MD5 abe8126e9682c9775ac4efaec8f74d6a
- SHA1 6fafa13526068b86ec432e5cf6f4e5599f2e8ccc
- SHA512 61ebace07d37d481611ee47a61f54c3c980256002c533057702a10eb2d95f6f5de7dbb297fb3b61f8fd3d4250e52578592486b42f6e6bf27aa8cee6d7abe9243
- SSDEEP 98304:D+CJZW7wblfLtp8MxvLkhXKW3sy3xA/CXa:6oZzlLtCVx3o/v
- TLSH T1FCF53346F590C220E8BBA57404E4C99103EF3D75E77438AAB352384C5E7A7A1593EB3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_abe8126e9682c9775ac4efaec8f74d6a_bkransomware_elex_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_abe8126e9682c9775ac4efaec8f74d6a_bkransomware_elex_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_abe8126e9682c9775ac4efaec8f74d6a_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- SHA256 c7f9b37f850ab44644a4075c556a2febe2703a6419371977aa3c9ed03074ec41
- MD5 abe8126e9682c9775ac4efaec8f74d6a
- SHA1 6fafa13526068b86ec432e5cf6f4e5599f2e8ccc
- SHA512 61ebace07d37d481611ee47a61f54c3c980256002c533057702a10eb2d95f6f5de7dbb297fb3b61f8fd3d4250e52578592486b42f6e6bf27aa8cee6d7abe9243
- SSDEEP 98304:D+CJZW7wblfLtp8MxvLkhXKW3sy3xA/CXa:6oZzlLtCVx3o/v
- TLSH T1FCF53346F590C220E8BBA57404E4C99103EF3D75E77438AAB352384C5E7A7A1593EB3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1