General
- Target 2026-07-09_8c750ecb1321fdc41b4d1804ff7b8ad4_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader
- Size 119KB
- Sample260709-r211racs8p
- SHA256 0f91b7b56a0838fbfcd5b26445e8802b3c26114bec1301f0259906a8014d1bb5
- MD5 8c750ecb1321fdc41b4d1804ff7b8ad4
- SHA1 73abd0d8ce71de1408f72b407dafed687235d829
- SHA512 456b08335ca7f1eb24d5e18916af9b41faf3aae7b68b7ea0409ce6935eccd34acd339775666ed404133055e08e52aa7e12887ff7f4aed1c9187a636d28f947a9
- SSDEEP 1536:AXCO+Mtx8xyULR68lciyuB9bXVc3eAPR7sWjcdavLFF/n1FcSPZVsWy5A:PM8xyQb6eAPSavBFzcSHsWCA
- TLSH T139C3AE4077D1C0B9D5B2537249798F62463DF93A4AB08ECB7388158E26B51C29737FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_8c750ecb1321fdc41b4d1804ff7b8ad4_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_8c750ecb1321fdc41b4d1804ff7b8ad4_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_8c750ecb1321fdc41b4d1804ff7b8ad4_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader
- Size 119KB
- SHA256 0f91b7b56a0838fbfcd5b26445e8802b3c26114bec1301f0259906a8014d1bb5
- MD5 8c750ecb1321fdc41b4d1804ff7b8ad4
- SHA1 73abd0d8ce71de1408f72b407dafed687235d829
- SHA512 456b08335ca7f1eb24d5e18916af9b41faf3aae7b68b7ea0409ce6935eccd34acd339775666ed404133055e08e52aa7e12887ff7f4aed1c9187a636d28f947a9
- SSDEEP 1536:AXCO+Mtx8xyULR68lciyuB9bXVc3eAPR7sWjcdavLFF/n1FcSPZVsWy5A:PM8xyQb6eAPSavBFzcSHsWCA
- TLSH T139C3AE4077D1C0B9D5B2537249798F62463DF93A4AB08ECB7388158E26B51C29737FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.