86037a557b381a26acae7495564ad87ea897ab71324bd35de68d7ab6b2c3e2fb

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-05_2575e16c3870586458b38ec4a2bc3b06_elex_maze_rhadamanthys
Size 7.5MB
Sample260705-vtghxset7w
SHA256 86037a557b381a26acae7495564ad87ea897ab71324bd35de68d7ab6b2c3e2fb
MD5 2575e16c3870586458b38ec4a2bc3b06
SHA1 02c24fb772e703fce3595928b292d89c7b4a59b2
SHA512 7dbf0660fdecd08820a0959fae3109f9e0a23c86444baef45518ad784d5aee421485205e6e282b9a04f83fdff44ec96104e818fbcb13e6b8b6cd56ab57ef53f7
SSDEEP 196608:sf9VSw12FuRRfPI/KWaqbongMyGSDiV7LYrxSF:lw12FuT3qCgLo7LWO
TLSH
T1AE8633C2B558386BD8F6113B882A69F501515C3E6E08C6FBA5B47F5B3EB11E2CB16703
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-07-05_2575e16c3870586458b38ec4a2bc3b06_elex_maze_rhadamanthys
- Size 7.5MB
- SHA256 86037a557b381a26acae7495564ad87ea897ab71324bd35de68d7ab6b2c3e2fb
- MD5 2575e16c3870586458b38ec4a2bc3b06
- SHA1 02c24fb772e703fce3595928b292d89c7b4a59b2
- SHA512 7dbf0660fdecd08820a0959fae3109f9e0a23c86444baef45518ad784d5aee421485205e6e282b9a04f83fdff44ec96104e818fbcb13e6b8b6cd56ab57ef53f7
- SSDEEP 196608:sf9VSw12FuRRfPI/KWaqbongMyGSDiV7LYrxSF:lw12FuT3qCgLo7LWO
- TLSH
  T1AE8633C2B558386BD8F6113B882A69F501515C3E6E08C6FBA5B47F5B3EB11E2CB16703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/FileInfo.dll
- Size 598KB
- SHA256 b3358c218f64338e3202817d2746bd614ab677824b5a1d8ac0eb9524ee0aee9e
- MD5 671d25a4169682f15e6f401700ca4842
- SHA1 ff33126c5c4d49eb37b4aa164c6f96abce8aa886
- SHA512 e01e2dd06f2f4214692482d1d973b31d37e07c628d79d591acc1e86b650e3334ebac0c477c03ed01e770642a45fa0880d071307d2fc34343bddec0c3075eb1cf
- SSDEEP 12288:h3V/PlX393ibiQQYq7u3daLacmghCH7bg7mMRvlh4HSaMdTwUqMV7h:hlHTSk7uxcmA7JR0cTwJMV7h
- TLSH
  T11ED47D2071C2813AE37E06B0667DAE7A157E39601B7448C7F3C85B3E69F49D29731A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/RCWidgetPlugin.dll
- Size 2.5MB
- SHA256 295dacec4b8352402e9d25dbd1de49e429e07b9caa188b8576aa19ae25752aaa
- MD5 bfedb03713c97d96eef5776bb9ad80d9
- SHA1 bc80241f14cb96bb471d3ce8fe646a0e440545c9
- SHA512 1afb7997a3840edb18494bd80d640846565ffd3abed84b5c6eff1bb1b2ce49c535c3e247a77bd997b58df7fda21f1f017533a531b7e0c43bf300e95a9fd1801c
- SSDEEP 49152:dm+BxDiLlplWc5+TTe/yfiSvJkWYIBf9PfNC76F9pTM:dmUiLdkfiSveWYIFhN+t
- TLSH
  T1BAC58D10B296863BD95D02706A3D9F7F10197E350B6148D7F3D83F2E69B18D39A32A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 27KB
- SHA256 57947a15ad3215185c7e15a5f0da393570845a13ab7b184a07fcefbf97537e48
- MD5 a568feaa357f44dd50c5e447fa8ee1b2
- SHA1 5c765fad342b756d5ea522087c6f7567b5f3ed57
- SHA512 7c8c36c0123de839e677beeba65c1af56c5e85d8f1ff2c94950aed33e026dff3fbda8c49859012862110117977c928b814c0d91c477583a2b8f83d73f3cdf174
- SSDEEP 384:ixoXlBT3SaMINWf52+4kb1VunYPLb2O1MnnDGaO5C8JN77hh+uA:iypSvIWb3Jko/MnDGxP3hoF
- TLSH
  T111C23B819B252CF2EAC6893931E4F5276E30F7E057D6C4E78AA984407EC17D3297C19E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/libcurl_x86.dll
- Size 2.1MB
- SHA256 635f988beb849c6510f54f681387bf810c2266bd27834c5a9c160cbfe6df44d4
- MD5 a26e75c0407c87786eea42febdb32532
- SHA1 27e52fdca023cb8f031cd55ac37965d93f7f7da7
- SHA512 fdd9760442579ad2a3df4f31464f9e66bc19a4390fa1c81afb516cce817097b5324024f712d9c1bf1a11ad30324f5a8aa83c72a732e1197e8804ab806d3859e6
- SSDEEP 49152:nGUR9r6hl8IXBPZ68L20v/SU8Y7NriOPquwgtJIpT:nGUR9r6b8IbBLjv/SUp7NriSg
- TLSH
  T1F0A5AE02FB8185B2E6DB427862FA677F8E3A55205328C9D3C79138749D201D2773E79E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  2345OCRConverter.dll
- Size 2.5MB
- SHA256 a7f76abf93c108899430bcbe46636d0755dd5a55c4ab7d8e05aaab2a3bbbba25
- MD5 fc64fd24b47de06c888ee841e58f53a9
- SHA1 7d73881f3eaec7f28929caf9453701113786a3b2
- SHA512 a1df5a6918fde57b4ab7b6e0fc3f5d020d84b19593c26033798c4fbb3fd52f79a37c81ec7c6f89fe170d4da87284aa6af769bb9757e8551e550c6be45e08e57e
- SSDEEP 49152:6nndQVUp9Vec9fPruD9fNDL1E6FBHqd/Tvvg6Jp6W++rGI64sr3DTw5tH7lYCyrM:6ndxwc9fPruR1DL1E6FBHqBTvY6L6W+O
- TLSH
  T129C55C21B656C23BD6AF01B1163D5E6E80187E75076004C7B3CC6F7A66B58E36A33E1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  2345OCRDumper.exe
- Size 735KB
- SHA256 2b468c0a97c262ecdef0266392ddcc7eeea65b50b01f7e1c85c6adcad913f50e
- MD5 d0e3598003e8b89d874b884fbacc65a6
- SHA1 6e2b2f0eaea9f0b2b6495bdbecc48bb4bb8d4b7b
- SHA512 e0466321d4a86bff3c36cb86fda52cb39aa2d9085ab18b68d34cd360f086e9e5be8331c29349ba8f8ac873589bc9c22229c523f0a3c29cc3a3593f2e87475a77
- SSDEEP 12288:Wm/7WqdQI+uGGQehkJ2S1b7TBJbeD0l1iBNwkMuaVRyO8F1HuTfn4X9DRhpm:WmzWl/uGGQeaSD0lPVRE3OTfn2917m
- TLSH
  T176F48C207682C13BD5B215B119ACDA7B006ABD250F6508CBE3D82F6E59B85D31F32E77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  2345OCRLoader.exe
- Size 1.2MB
- SHA256 4a8799ab7eef725efdd55599a5ede698c0d41f89ccbeca53ad701802b32f5ef2
- MD5 6e8d64c6eaf6f59cf1f4bfaa5db4b091
- SHA1 a644a77e0873ed151198ac329d98003cea36ad9f
- SHA512 9ec435f80f8f2338d9b0577c972fd852ab1f75124d26ed676ead66d4177683bbe4553c81dfb312e5e561b58704806d677ce76bfd227dae8d209c98d6e5c9e063
- SSDEEP 24576:Y2/oQCQrb3m0KLoJ+9G8lkjCbfIS/TDextT+wttFB:oDQrb2TLo4AjCb/TKxtqwttFB
- TLSH
  T17C456B20B682C737D56640B0176CCE6E1018B9742B6248C7F3D85F6A39F1ED25B36EA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  2345OCRMain.exe
- Size 272KB
- SHA256 864ae37bbfe6ea2b7daef8695fca4ed814135ff1fe2e6bf9e0feeb1caec24599
- MD5 ab2e8402bd3a36daf7c416addd88842e
- SHA1 a3c521c98c52110ab770ca0b5a252577e8d44038
- SHA512 a57d67ab77c8211044059a645776ba7312c8a861e2143070233e7fc34e0343076ab37987abcaa81457b09b1c37ed21de9eb88416a6a2a708759a0b3d4add916b
- SSDEEP 6144:SIIIIZlbKdjgq0vh0LDaCIMTBjHgLyCJYC4WYY5S+MwCIVBMb5lUC3cM:Emdjwvh0CCIMTdHKyNWNswCyUXUCsM
- TLSH
  T11854AE107659C333D76212B086EC9F7E8666BE184F7000CB63987F3A3A752D366359A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  2345OCRUpdate.exe
- Size 1.6MB
- SHA256 3aa99c2cf044b58f3227e5b011594d2a5126b7dd5be968ba14936aa134ae86da
- MD5 2db2c6700ffc39eb480e75728079f5ee
- SHA1 8847710dd9a9d3e0304b3ab11e70c59440301e6f
- SHA512 59a01166e3d510b202b47a7d0abfccf23a1f535a7f036d7c6c1e5bff08e2510d89edb1eb45ab7487a8c4993b5f314c6ca3a8751a9ce0d4c2abe7d858dae8cee6
- SSDEEP 49152:OWKAdYoJZlu/wD/zsjK1pTPIcfoHq2IM4K8:xdlHD/PFP
- TLSH
  T1CC756B31B657C637D5A201B15A2C8E6A805879342BA18CC7F3C40F2E69F1DD39636F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  2345PdfInfo.dll
- Size 57KB
- SHA256 846e16de4a30c57625fe73be59da2275b8c74d63f5ae3087965589bf756cb045
- MD5 fc77825e8ed64e4e212c5a3b86da694a
- SHA1 251f731a7a3c3b85e88f451769da2667fa797eab
- SHA512 d6b198bf14b809bb6dac43e4b4f3aa05a280fcccd63486bbf8ae870cc54b4c5dfc5e9a1e1a68de306c193910a4afb7d4c7bb89f175369f215ac40678b306d2f0
- SSDEEP 1536:R0BKHUSCn712qOS3onPbtR1AbJA6Rz7HxSl97AlfIxA:R0nn71c8onPbD1AbJA6Rzgl9El1
- TLSH
  T1CD438E61F90014B2E95947B035DD6A3B8AB676186FD0C5C353FAC22D9F103C27A7A1EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  node.dll
- Size 14.4MB
- SHA256 94a19e8d17ef43e36880731a623f6ca726db49295820408b556a8a4e2e19396f
- MD5 8d96459a90e0af13ea56f9d6dc15911b
- SHA1 06ff7ce35ced301f2d60571481aa36c6dcc97007
- SHA512 30489041a069890daba6e7e3f7809e21159a0106183a757e496417c68024f25c6f3246c5eadc5179613719633fa86a8fa09ee4bf0242989e5debf7c63a679e93
- SSDEEP 196608:v3e60GAU93bPO8O5Dl6yu93A6ZOi3kK2uLk0+qp3hH5RNdPo8:v3qG79y95DW9Q6ZOi3+uhz
- TLSH
  T1E9E68D23E89180B9D69202F2CE7C7B7959EDAA25433955FB5F9C0C015BA0CE3773E252
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24