General
- Target 2026-07-10_021584359aa4c48926c96d4382cf1ffd_elex_maze_rhadamanthys_smoke-loader
- Size 519KB
- Sample260710-22mhgagy2x
- SHA256 42fca253f092c6a7e83379773e861d763e16cc1c315fcd44188b74a3d4925335
- MD5 021584359aa4c48926c96d4382cf1ffd
- SHA1 7ca797686b43b49324448049dc455fb8646a810d
- SHA512 72814d994b99e316b5101ac2edb54bef6891e720f2b9f05ab3bc8e86deda56fa7acca2baeca2034c225e3eb2db36c32d752a9279d2cb5c64c2b2f101363c6da7
- SSDEEP 12288:U4/0L9HTEq0GeLd6QxJjP6qnCmHrfRxM7Vws:U4sBTZ0GeLcQxBPlHzRmCs
- TLSH T171B4021279D38171CA61013048F7A536AFBEFD201975CE7B636C379A2A60250637F6FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_021584359aa4c48926c96d4382cf1ffd_elex_maze_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_021584359aa4c48926c96d4382cf1ffd_elex_maze_rhadamanthys_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_021584359aa4c48926c96d4382cf1ffd_elex_maze_rhadamanthys_smoke-loader
- Size 519KB
- SHA256 42fca253f092c6a7e83379773e861d763e16cc1c315fcd44188b74a3d4925335
- MD5 021584359aa4c48926c96d4382cf1ffd
- SHA1 7ca797686b43b49324448049dc455fb8646a810d
- SHA512 72814d994b99e316b5101ac2edb54bef6891e720f2b9f05ab3bc8e86deda56fa7acca2baeca2034c225e3eb2db36c32d752a9279d2cb5c64c2b2f101363c6da7
- SSDEEP 12288:U4/0L9HTEq0GeLd6QxJjP6qnCmHrfRxM7Vws:U4sBTZ0GeLcQxBPlHzRmCs
- TLSH T171B4021279D38171CA61013048F7A536AFBEFD201975CE7B636C379A2A60250637F6FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)