General
- Target 2026-07-03_a6d2f16971e02d3c67a2d045c23238ab_bkransomware_elex_maze_rhadamanthys_smoke-loader
- Size 516KB
- Sample260703-lxs7fsey7t
- SHA256 268c70f221c8de1c7d73eb4e1ad6cba49313d8982adc1c1148e8973ef27572c6
- MD5 a6d2f16971e02d3c67a2d045c23238ab
- SHA1 f85caf8447a8d577edef70ee091e7cf4414b1a9b
- SHA512 06a56b2738d83675332dfafb7a4bdc3e8836ca97e3559f4c6038c65f29f56b8534a6fec3d9cddb4838ea1986125b2f0a4c8870a102553a7b0bae3fa144e6da78
- SSDEEP 6144:CER/W0pO6NER/W0RO6lO6JER/W0G9/BO4Ha8R2U9NHBcBTvkxQM:ztpJStRJlJGtuUcRcU9NEbK
- TLSH T18AB47D01B8D98030E5B742774964A95206BEFD7A4F369E9F27D80D8C9B741C0BB26B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_a6d2f16971e02d3c67a2d045c23238ab_bkransomware_elex_maze_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_a6d2f16971e02d3c67a2d045c23238ab_bkransomware_elex_maze_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260630-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_a6d2f16971e02d3c67a2d045c23238ab_bkransomware_elex_maze_rhadamanthys_smoke-loader
- Size 516KB
- SHA256 268c70f221c8de1c7d73eb4e1ad6cba49313d8982adc1c1148e8973ef27572c6
- MD5 a6d2f16971e02d3c67a2d045c23238ab
- SHA1 f85caf8447a8d577edef70ee091e7cf4414b1a9b
- SHA512 06a56b2738d83675332dfafb7a4bdc3e8836ca97e3559f4c6038c65f29f56b8534a6fec3d9cddb4838ea1986125b2f0a4c8870a102553a7b0bae3fa144e6da78
- SSDEEP 6144:CER/W0pO6NER/W0RO6lO6JER/W0G9/BO4Ha8R2U9NHBcBTvkxQM:ztpJStRJlJGtuUcRcU9NEbK
- TLSH T18AB47D01B8D98030E5B742774964A95206BEFD7A4F369E9F27D80D8C9B741C0BB26B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.