2026-07-17_81196adc730c2b8e475986967480a340_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

General

Target
2026-07-17_81196adc730c2b8e475986967480a340_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader
Size 119KB
Sample260717-xjhz4sbs8q
SHA256 59d244ab8afc1db7107c6ec7692b60075b9fe2eef91d70f53730779d8387ab90
MD5 81196adc730c2b8e475986967480a340
SHA1 85b5757f5912388c29ee1177566a544104c02038
SHA512 c019ddb053b2d7965f284a0f3e794ba9b87ee351bc7b2b1080df4390816696c9f066d6e551318268bea96d53cef4e24ec18e76d9ef6be634a699c8258d7147dd
SSDEEP 1536:AXCO+Mtx8xyULR68lciyuB9bXVc3eAPR7sWjcdavLFF/n1FcSPZVsWy5v:PM8xyQb6eAPSavBFzcSHsWCv
TLSH
T1C0C3AE4077D1C0B9D5B2537249B98F62463DF93A4AB08ECB7388158E26B51C29737FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-17_81196adc730c2b8e475986967480a340_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

2026-07-17_81196adc730c2b8e475986967480a340_bkransomware_elex_karagany_maze_rhadamanthys_smoke-loader

.exe 119KB

IMPHASH d00612966b67b056a02bd4a7f6d19d4f
SHA256 59d244ab8afc1db7107c6ec7692b60075b9fe2eef91d70f53730779d8387ab90
MD5 81196adc730c2b8e475986967480a340
SHA1 85b5757f5912388c29ee1177566a544104c02038
SHA512 c019ddb053b2d7965f284a0f3e794ba9b87ee351bc7b2b1080df4390816696c9f066d6e551318268bea96d53cef4e24ec18e76d9ef6be634a699c8258d7147dd
SSDEEP 1536:AXCO+Mtx8xyULR68lciyuB9bXVc3eAPR7sWjcdavLFF/n1FcSPZVsWy5v:PM8xyQb6eAPSavBFzcSHsWCv
TLSH
T1C0C3AE4077D1C0B9D5B2537249B98F62463DF93A4AB08ECB7388158E26B51C29737FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

22595

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths