General
- Target 2026-07-07_e9e02cd0638d9263763114d77785a1da_amadey_bkransomware_elex_maze_smoke-loader_stealc
- Size 782KB
- Sample260707-hmkksagy6m
- SHA256 810d8994639865a3ffc16b47a6e3cde734a3082df7d7bc877c8fbd8e84c49aff
- MD5 e9e02cd0638d9263763114d77785a1da
- SHA1 2caa641e5f8274b0be837d0ae36671588b0d463f
- SHA512 1326c28a26f49e63476139e621c3d102f0231e30ce991f55a2f48c1004d12170c6a398e304ce3a322815db2492b5f0d55cc81ee04a4affbcd2a42a58250a2c4a
- SSDEEP 24576:vCERI6ifz70iwX2GTqRNx/4kLp1CfhgbpC:vCERI/0fX2XAe1CUpC
- TLSH T1B105AF31B9C18137C1B301728D6CAB3A506DB9360B2A49E7B3C84B2D5D782D26F357A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-07_e9e02cd0638d9263763114d77785a1da_amadey_bkransomware_elex_maze_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_e9e02cd0638d9263763114d77785a1da_amadey_bkransomware_elex_maze_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_e9e02cd0638d9263763114d77785a1da_amadey_bkransomware_elex_maze_smoke-loader_stealc
- Size 782KB
- SHA256 810d8994639865a3ffc16b47a6e3cde734a3082df7d7bc877c8fbd8e84c49aff
- MD5 e9e02cd0638d9263763114d77785a1da
- SHA1 2caa641e5f8274b0be837d0ae36671588b0d463f
- SHA512 1326c28a26f49e63476139e621c3d102f0231e30ce991f55a2f48c1004d12170c6a398e304ce3a322815db2492b5f0d55cc81ee04a4affbcd2a42a58250a2c4a
- SSDEEP 24576:vCERI6ifz70iwX2GTqRNx/4kLp1CfhgbpC:vCERI/0fX2XAe1CUpC
- TLSH T1B105AF31B9C18137C1B301728D6CAB3A506DB9360B2A49E7B3C84B2D5D782D26F357A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.