2026-07-08_533958857530268f998e128c53b73251_bkransomware_elex_maze_remcos_stealc

General

Target
2026-07-08_533958857530268f998e128c53b73251_bkransomware_elex_maze_remcos_stealc
Size 375KB
Sample260708-e9k82sbx2k
SHA256 10c4915cb0c4608dc55a438cc4df1812eb2281ab6af51af97dd8f308894c3dcb
MD5 533958857530268f998e128c53b73251
SHA1 0a44bd7a950d7085316418473a3ef34cac040091
SHA512 737fa1f96b6ff539ac2b6ab6f3269198b37107e3899697998e9d7567f89bbff39c54af2bdfe837c8e367e3bafaa2c61f1e326ef9a0e236f0005df13023a441ce
SSDEEP 6144:j9GwYOgzK8AypOPPUc65F4TnynD6Siuh1JfoBzTEN/vlmRR+H9lZ5mx6/:j9GTzlHOPcX3sCD6S11NoBzTEN/v2Ror
TLSH
T15584AE21B6C7D032C46282FD1669FB3264FE79B2BB2169DB67C989CD45302C0A637717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_533958857530268f998e128c53b73251_bkransomware_elex_maze_remcos_stealc

File Explorer

2026-07-08_533958857530268f998e128c53b73251_bkransomware_elex_maze_remcos_stealc

.exe 375KB

2026-07-08_533958857530268f998e128c53b73251_bkransomware_elex_maze_remcos_stealc

IMPHASH ae1b8e3943fed7c60840ee165237b288
SHA256 10c4915cb0c4608dc55a438cc4df1812eb2281ab6af51af97dd8f308894c3dcb
MD5 533958857530268f998e128c53b73251
SHA1 0a44bd7a950d7085316418473a3ef34cac040091
SHA512 737fa1f96b6ff539ac2b6ab6f3269198b37107e3899697998e9d7567f89bbff39c54af2bdfe837c8e367e3bafaa2c61f1e326ef9a0e236f0005df13023a441ce
SSDEEP 6144:j9GwYOgzK8AypOPPUc65F4TnynD6Siuh1JfoBzTEN/vlmRR+H9lZ5mx6/:j9GTzlHOPcX3sCD6S11NoBzTEN/v2Ror
TLSH
T15584AE21B6C7D032C46282FD1669FB3264FE79B2BB2169DB67C989CD45302C0A637717
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

182080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

GetClipRgn GetCurrentObject GetDeviceCaps GetMapMode GetNearestColor GetObjectType GetPixelFormat GetStretchBltMode GetTextAlign GetTextCharset GetTextCharsetInfo GetFontLanguageInfo GetFontUnicodeRanges SetPixel SetSystemPaletteUse SetTextCharacterExtra SetTextColor SetTextAlign SetTextJustification UpdateColors

user32

LoadIconA GetWindowLongA GetCursor GetMenuContextHelpId GetWindowContextHelpId SetWindowTextA RemovePropA GetPropA GetScrollPos EndPaint BeginPaint GetWindowDC GetDC WindowFromDC GetForegroundWindow DrawTextA GetMenuCheckMarkDimensions GetMenuItemCount GetMenuItemID GetMenuState GetMenu IsWindowEnabled EnableWindow GetInputState GetDialogBaseUnits CheckDlgButton SetDlgItemTextA GetDlgItem MoveWindow ShowWindow CallWindowProcA PostMessageA SendMessageA

kernel32

GetFullPathNameA ReadConsoleW ReadFile SetEndOfFile GetTimeZoneInformation CreateFileW GetCurrentDirectoryW SetCurrentDirectoryW GetFullPathNameW PeekNamedPipe GetFileInformationByHandle FileTimeToLocalFileTime WriteConsoleW SetFilePointerEx SetStdHandle GetStringTypeW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW HeapSize OutputDebugStringW FreeEnvironmentStringsW GetEnvironmentStringsW GetModuleFileNameA FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetDriveTypeW FindFirstFileExW FindClose GetStdHandle DeleteFileA FlushFileBuffers GetDriveTypeA GetFileType SetFilePointer WriteFile IsDebuggerPresent CloseHandle GetLastError QueryPerformanceCounter GetProcessHeap GetCurrentProcess GetCurrentProcessId GetCurrentThreadId IsProcessorFeaturePresent GetVersion GetTickCount GetModuleHandleA GetProcAddress LockResource GlobalSize GlobalFlags GlobalHandle LocalFlags FindResourceA MoveFileA EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte HeapFree HeapAlloc HeapReAlloc GetSystemTimeAsFileTime GetCommandLineA EnterCriticalSection LeaveCriticalSection DeleteCriticalSection FatalAppExitA UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount CreateEventW Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW CreateSemaphoreW GetModuleFileNameW SetConsoleCtrlHandler FreeLibrary LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThread GetConsoleCP GetConsoleMode RtlUnwind SetEnvironmentVariableA

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_533958857530268f998e128c53b73251_bkransomware_elex_maze_remcos_stealc

gdi32

user32

kernel32

generic