General
- Target 2026-07-04_85e4ea8098723890675012ed105dd63f_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader
- Size 119KB
- Sample260704-2sbplsey2w
- SHA256 ce7c77a1a289ed5aa84bc03691475e3c7eecf47594bdf00c32557165786f45ac
- MD5 85e4ea8098723890675012ed105dd63f
- SHA1 28cc254906494be120fd72203d200eda7dc5b449
- SHA512 997a0c1f10e8d0fb8d392a9b4120f82b04e852220bccfe3d07ccd4a47a44847f495ad6cdeaa7efc86cc83bd7d46232e50e3482079c392e282553834dbef62694
- SSDEEP 1536:AXCO+Mtx8xyULR68lciyuB9bXVc3eAPR7sWjcdavLFF/n1FcSPZVsWy5o:PM8xyQb6eAPSavBFzcSHsWCo
- TLSH T1CAC3AE4077D1C0B9D5B2537249B98F62463DF93A4AB08ECB7388158E26B51C29737FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_85e4ea8098723890675012ed105dd63f_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_85e4ea8098723890675012ed105dd63f_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_85e4ea8098723890675012ed105dd63f_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader
- Size 119KB
- SHA256 ce7c77a1a289ed5aa84bc03691475e3c7eecf47594bdf00c32557165786f45ac
- MD5 85e4ea8098723890675012ed105dd63f
- SHA1 28cc254906494be120fd72203d200eda7dc5b449
- SHA512 997a0c1f10e8d0fb8d392a9b4120f82b04e852220bccfe3d07ccd4a47a44847f495ad6cdeaa7efc86cc83bd7d46232e50e3482079c392e282553834dbef62694
- SSDEEP 1536:AXCO+Mtx8xyULR68lciyuB9bXVc3eAPR7sWjcdavLFF/n1FcSPZVsWy5o:PM8xyQb6eAPSavBFzcSHsWCo
- TLSH T1CAC3AE4077D1C0B9D5B2537249B98F62463DF93A4AB08ECB7388158E26B51C29737FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.