General
- Target 2026-07-10_ab3827d34c5f93aceffc41498f4125ce_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- Sample260710-yfb8tsav7y
- SHA256 85f145a02d170b013d9be09cc39b07e578d7c24951f892a21314027f699bef70
- MD5 ab3827d34c5f93aceffc41498f4125ce
- SHA1 a0c96414fbc3101c8cada3dcd7a36bfbf26fc2b6
- SHA512 3f5da6f0b5d247999314d58294742831fc1390c60445a224dcaa5bfc97f59bbc8cf3466741aef99b3ec89d81d654823d5663fd12129b8a5d099cd3e8da6ed3d2
- SSDEEP 98304:DkdPIM7X/YT5JFAlez0aCTiv+MrhrGdw7j:I5tXAF0riNGaX
- TLSH T1F7F53367738E9061FD928B3007F04DA4692BE1BE0CE549DAB38B78BA79910E4EC71517
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_ab3827d34c5f93aceffc41498f4125ce_bkransomware_elex_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_ab3827d34c5f93aceffc41498f4125ce_bkransomware_elex_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_ab3827d34c5f93aceffc41498f4125ce_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- SHA256 85f145a02d170b013d9be09cc39b07e578d7c24951f892a21314027f699bef70
- MD5 ab3827d34c5f93aceffc41498f4125ce
- SHA1 a0c96414fbc3101c8cada3dcd7a36bfbf26fc2b6
- SHA512 3f5da6f0b5d247999314d58294742831fc1390c60445a224dcaa5bfc97f59bbc8cf3466741aef99b3ec89d81d654823d5663fd12129b8a5d099cd3e8da6ed3d2
- SSDEEP 98304:DkdPIM7X/YT5JFAlez0aCTiv+MrhrGdw7j:I5tXAF0riNGaX
- TLSH T1F7F53367738E9061FD928B3007F04DA4692BE1BE0CE549DAB38B78BA79910E4EC71517
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1