2026-07-09_e508d3f17d21a5560edace659b3230f3_bkransomware_elex_maze_rhadamanthys_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-09_e508d3f17d21a5560edace659b3230f3_bkransomware_elex_maze_rhadamanthys_smoke-loader
Size 1.3MB
Sample260709-b7h45act8w
SHA256 1146089a6dc4da320b07ab68379fd3361c89b75f83f34041b5f0130d86ff2f9e
MD5 e508d3f17d21a5560edace659b3230f3
SHA1 ffe57a811da3d1e313907fad82c8b1595d2bac25
SHA512 f05208670191e814463d8010fed5645c16e5f23717de18e0ea58f7bcbd2bdaf014ac187a5402f2c403b991ed594d87f52b3f0c5b6f000172ce723eddffc11155
SSDEEP 12288:lfD34XiPvrLr0Ci41UO5wHPdjIpTEx/Mz0gLeAfsVyqBn9r2il0:xcSnnrFb4PM4MYgLxEVyGLm
TLSH
T12455012233E580B5E5F72B3055B896A55A3FBC72EE75D50FB384210E1A76A80D931B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-09_e508d3f17d21a5560edace659b3230f3_bkransomware_elex_maze_rhadamanthys_smoke-loader

File Explorer

2026-07-09_e508d3f17d21a5560edace659b3230f3_bkransomware_elex_maze_rhadamanthys_smoke-loader

.exe 1.3MB

2026-07-09_e508d3f17d21a5560edace659b3230f3_bkransomware_elex_maze_rhadamanthys_smoke-loader

IMPHASH 2d2cee6d005eec5676742ba250d53d92
SHA256 1146089a6dc4da320b07ab68379fd3361c89b75f83f34041b5f0130d86ff2f9e
MD5 e508d3f17d21a5560edace659b3230f3
SHA1 ffe57a811da3d1e313907fad82c8b1595d2bac25
SHA512 f05208670191e814463d8010fed5645c16e5f23717de18e0ea58f7bcbd2bdaf014ac187a5402f2c403b991ed594d87f52b3f0c5b6f000172ce723eddffc11155
SSDEEP 12288:lfD34XiPvrLr0Ci41UO5wHPdjIpTEx/Mz0gLeAfsVyqBn9r2il0:xcSnnrFb4PM4MYgLxEVyGLm
TLSH
T12455012233E580B5E5F72B3055B896A55A3FBC72EE75D50FB384210E1A76A80D931B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22822

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

netapi32

NetServerEnum NetApiBufferFree NetSessionEnum

kernel32

Sleep WriteFile CloseHandle LoadLibraryExW SetLastError GetCurrentProcess MultiByteToWideChar GetLocalTime SystemTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime FormatMessageW GetTimeFormatW GetDateFormatW GetLastError FreeLibrary GetModuleFileNameW GetCommandLineW GetModuleHandleW LoadLibraryW GetStdHandle GetFileType LocalFree LocalAlloc GetProcAddress GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW LCMapStringW OutputDebugStringW HeapSize HeapReAlloc SetFilePointerEx WriteConsoleW ReadConsoleW CreateFileW RaiseException LoadLibraryExA EncodePointer DecodePointer ExitProcess GetModuleHandleExW WideCharToMultiByte HeapFree HeapAlloc GetConsoleMode ReadConsoleInputA SetConsoleMode EnterCriticalSection LeaveCriticalSection SetStdHandle GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage GetACP GetOEMCP GetCPInfo DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetProcessHeap FlushFileBuffers GetConsoleCP ReadFile RtlUnwind QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime

comdlg32

PrintDlgW

advapi32

RegQueryInfoKeyW RegEnumKeyExW LookupAccountNameW LookupAccountSidW FreeSid AllocateAndInitializeSid RegConnectRegistryW RegSetValueExW RegQueryValueExW RegOpenKeyExW RegOpenKeyW RegCreateKeyW RegCloseKey

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-09_e508d3f17d21a5560edace659b3230f3_bkransomware_elex_maze_rhadamanthys_smoke-loader

version

netapi32

kernel32

comdlg32

advapi32

generic