2026-07-12_cf02248984c5d0bf8398f55b8e27ee7d_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

General

Target
2026-07-12_cf02248984c5d0bf8398f55b8e27ee7d_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader
Size 119KB
Sample260712-3tapdabz31
SHA256 f37fa7e48c10f9d2efe510877c7a6a4bd407010135ec0eeb62be147173ac937b
MD5 cf02248984c5d0bf8398f55b8e27ee7d
SHA1 dafe17d8edcbfc069459b4c08871c6d74291aa6a
SHA512 31179fb5907d0f127508793466cd9b3141fef66823451b041f8ea2d5800ed55a6e2c92b7fe66512741154ef023bfa707db6303da6c9d46aa229bc9ee8e7c9358
SSDEEP 1536:AXCO+Mtx8xyULR68lciyuB9bXVc3eAPR7sWjcdavLFF/n1FcSPZVsWy5d:PM8xyQb6eAPSavBFzcSHsWCd
TLSH
T197C3AE4077D1C0B9D5B2537249B98F62463DF93A4AB08ECB7388158E26B51C29737FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-12_cf02248984c5d0bf8398f55b8e27ee7d_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

2026-07-12_cf02248984c5d0bf8398f55b8e27ee7d_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

.exe 119KB

IMPHASH d00612966b67b056a02bd4a7f6d19d4f
SHA256 f37fa7e48c10f9d2efe510877c7a6a4bd407010135ec0eeb62be147173ac937b
MD5 cf02248984c5d0bf8398f55b8e27ee7d
SHA1 dafe17d8edcbfc069459b4c08871c6d74291aa6a
SHA512 31179fb5907d0f127508793466cd9b3141fef66823451b041f8ea2d5800ed55a6e2c92b7fe66512741154ef023bfa707db6303da6c9d46aa229bc9ee8e7c9358
SSDEEP 1536:AXCO+Mtx8xyULR68lciyuB9bXVc3eAPR7sWjcdavLFF/n1FcSPZVsWy5d:PM8xyQb6eAPSavBFzcSHsWCd
TLSH
T197C3AE4077D1C0B9D5B2537249B98F62463DF93A4AB08ECB7388158E26B51C29737FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

22595

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths