General
- Target 2026-07-02_cb5edb80c46b3129ef9ba4df85c63304_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- Sample260702-x78wfads7w
- SHA256 ebc3a9d878efc412096c7e616986853015284525ee9962eefa0a3ce1176d4f63
- MD5 cb5edb80c46b3129ef9ba4df85c63304
- SHA1 ddfbb342d0ff1b3d084d60bd85e711de75be1e1c
- SHA512 243db12532aff21e49dd409c745bf4a9588f8270eacee54f6122db06f988ab885f0510428a34385e1046c6e3f16d248f9e14e233b96276cb2e8caee008520b46
- SSDEEP 49152:DeSZ8v6lb8AfyMNG/11RQB69d5ueGaz0nrnK6sH2UHtWhg9M+SnvYAyISGfBknDx:Dez6XygGu67ZGLK/ZchgiAAnJU
- TLSH T119F5332603C6C56DEA1A0F7AA395CEC756437CBAC9F88DD213C0A94E90314D51D2DBAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_cb5edb80c46b3129ef9ba4df85c63304_bkransomware_elex_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_cb5edb80c46b3129ef9ba4df85c63304_bkransomware_elex_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260630-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_cb5edb80c46b3129ef9ba4df85c63304_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- SHA256 ebc3a9d878efc412096c7e616986853015284525ee9962eefa0a3ce1176d4f63
- MD5 cb5edb80c46b3129ef9ba4df85c63304
- SHA1 ddfbb342d0ff1b3d084d60bd85e711de75be1e1c
- SHA512 243db12532aff21e49dd409c745bf4a9588f8270eacee54f6122db06f988ab885f0510428a34385e1046c6e3f16d248f9e14e233b96276cb2e8caee008520b46
- SSDEEP 49152:DeSZ8v6lb8AfyMNG/11RQB69d5ueGaz0nrnK6sH2UHtWhg9M+SnvYAyISGfBknDx:Dez6XygGu67ZGLK/ZchgiAAnJU
- TLSH T119F5332603C6C56DEA1A0F7AA395CEC756437CBAC9F88DD213C0A94E90314D51D2DBAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1