General
- Target 2026-07-05_af01797a4d8b44bff9f2d5fa66814df6_bkransomware_elex_icedid_maze
- Size 2.3MB
- Sample260705-bm3m2afz4v
- SHA256 c5d6cc33957004e468da19a9862f3abd3f7b29a4d0f7705cfdf89e28df8b0db3
- MD5 af01797a4d8b44bff9f2d5fa66814df6
- SHA1 7facf065e2d985fa4b16da3010c090ae80695327
- SHA512 8f087f9fb302c60b425a8fd41e64af25920856797776ed5a77c5aa88035e774643de13dc9290a7093d95e68810f91c857a071e095fac8bd6e17794f6e65ae601
- SSDEEP 49152:uDD0FZs/Yl7dYUMQ+fCi6pPO8IFeIT8uxV1XL4vcV8zU7YRuZe0Fu6hRUP:GD0FZs/U73MQ+fCi6VeeU8uxV1XMcgUM
- TLSH T188B5BF33F594907AC93313315E9D726C72A9BB710F36428722E55F2D3EB05C36A296A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_af01797a4d8b44bff9f2d5fa66814df6_bkransomware_elex_icedid_maze.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_af01797a4d8b44bff9f2d5fa66814df6_bkransomware_elex_icedid_maze.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_af01797a4d8b44bff9f2d5fa66814df6_bkransomware_elex_icedid_maze
- Size 2.3MB
- SHA256 c5d6cc33957004e468da19a9862f3abd3f7b29a4d0f7705cfdf89e28df8b0db3
- MD5 af01797a4d8b44bff9f2d5fa66814df6
- SHA1 7facf065e2d985fa4b16da3010c090ae80695327
- SHA512 8f087f9fb302c60b425a8fd41e64af25920856797776ed5a77c5aa88035e774643de13dc9290a7093d95e68810f91c857a071e095fac8bd6e17794f6e65ae601
- SSDEEP 49152:uDD0FZs/Yl7dYUMQ+fCi6pPO8IFeIT8uxV1XL4vcV8zU7YRuZe0Fu6hRUP:GD0FZs/U73MQ+fCi6VeeU8uxV1XMcgUM
- TLSH T188B5BF33F594907AC93313315E9D726C72A9BB710F36428722E55F2D3EB05C36A296A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.