General
- Target 2026-07-15_552c3054d522a08d86052c9430eec080_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- Sample260715-dck2cac18z
- SHA256 8f091a748f1bca2804f1310535fc29ef52c97a919cf8965090cdfbc66359426f
- MD5 552c3054d522a08d86052c9430eec080
- SHA1 58ad089d2f3a6de871c004d5d714bc4d3ac4c7bc
- SHA512 21623ee9625681657e0073b6d4cb7336d8ac63a415989c60eefecfec27dd7375703abce0c5382b5c9ecf31c6d4e6653379f98e38b6b7364b3907c6b5e89f9099
- SSDEEP 98304:q4jqHRzCzWxMXlW2sKl9GsXcuftCbIUxJOe2uuS1/jo:bqgSWlW2XcfsQ2hS1/8
- TLSH T1E4F53352F4C4D132F4BE47FA86A84E101A2F79AD1563DA8F53DCB64A19710C08E6EB37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_552c3054d522a08d86052c9430eec080_bkransomware_elex_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_552c3054d522a08d86052c9430eec080_bkransomware_elex_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_552c3054d522a08d86052c9430eec080_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- SHA256 8f091a748f1bca2804f1310535fc29ef52c97a919cf8965090cdfbc66359426f
- MD5 552c3054d522a08d86052c9430eec080
- SHA1 58ad089d2f3a6de871c004d5d714bc4d3ac4c7bc
- SHA512 21623ee9625681657e0073b6d4cb7336d8ac63a415989c60eefecfec27dd7375703abce0c5382b5c9ecf31c6d4e6653379f98e38b6b7364b3907c6b5e89f9099
- SSDEEP 98304:q4jqHRzCzWxMXlW2sKl9GsXcuftCbIUxJOe2uuS1/jo:bqgSWlW2XcfsQ2hS1/8
- TLSH T1E4F53352F4C4D132F4BE47FA86A84E101A2F79AD1563DA8F53DCB64A19710C08E6EB37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1