2026-07-11_d10a2f599aa2ae8a7914b06517842a2a_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

General

Target
2026-07-11_d10a2f599aa2ae8a7914b06517842a2a_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader
Size 119KB
Sample260711-pj2s8ab16w
SHA256 308c6cecbdb752fd431ff828399b2e4c88c57349b1f86d79f230e8be8fb03c82
MD5 d10a2f599aa2ae8a7914b06517842a2a
SHA1 f03644209630f0dde873d4676c6b6e2e3860d073
SHA512 cbac075cfa32cd299a52dd6f7c65f6de8cbf5e24cb5e21cb6ce32ce7bce26cd72501639f3f2cbe988ec87e0dc9d636ddf69320ea2b9aff5c9d20ebfedc15476c
SSDEEP 1536:AXCO+Mtx8xyULR68lciyuB9bXVc3eAPR7sWjcdavLFF/n1FcSPZVsWy5bC:PM8xyQb6eAPSavBFzcSHsWCbC
TLSH
T15DC3AE4077D1C0B9D5B2537249798F62463DF93A4AB08ECB7388158E26B51C29737FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_d10a2f599aa2ae8a7914b06517842a2a_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

2026-07-11_d10a2f599aa2ae8a7914b06517842a2a_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

.exe 119KB

IMPHASH d00612966b67b056a02bd4a7f6d19d4f
SHA256 308c6cecbdb752fd431ff828399b2e4c88c57349b1f86d79f230e8be8fb03c82
MD5 d10a2f599aa2ae8a7914b06517842a2a
SHA1 f03644209630f0dde873d4676c6b6e2e3860d073
SHA512 cbac075cfa32cd299a52dd6f7c65f6de8cbf5e24cb5e21cb6ce32ce7bce26cd72501639f3f2cbe988ec87e0dc9d636ddf69320ea2b9aff5c9d20ebfedc15476c
SSDEEP 1536:AXCO+Mtx8xyULR68lciyuB9bXVc3eAPR7sWjcdavLFF/n1FcSPZVsWy5bC:PM8xyQb6eAPSavBFzcSHsWCbC
TLSH
T15DC3AE4077D1C0B9D5B2537249798F62463DF93A4AB08ECB7388158E26B51C29737FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

22595

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths