General
- Target 2026-07-19_776876f009ec4d55774719f09d83afca_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- Sample260719-ve97pae17q
- SHA256 77a6e417d57c72f3718142f6384ba3fb73786d776fddbb2036374ff25044ab2f
- MD5 776876f009ec4d55774719f09d83afca
- SHA1 ebf654910f113e895178c041a1e1f5bdf8ccbb7b
- SHA512 8c3766f5fa63cc99199ff0e0f1a9783229694495488f89f7eed913f2a6ef8075bcacaa703388991c41cb304c8a43a47cf844075e381a890fa596055d3b40e01e
- SSDEEP 49152:Dn6tDCjZjW4AWnf6a/QkTZYkCm4EnqnbqYkaws2G7M2qljnNXHJ2DEwy:DSmVq4YCQk9IEn4/kanFM2qljNZXH
- TLSH T1D2F53307FFC2A27DD292613261945B89121FBD7A1BB60D93FBA9845C83E05C4497B33B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_776876f009ec4d55774719f09d83afca_bkransomware_elex_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_776876f009ec4d55774719f09d83afca_bkransomware_elex_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_776876f009ec4d55774719f09d83afca_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- SHA256 77a6e417d57c72f3718142f6384ba3fb73786d776fddbb2036374ff25044ab2f
- MD5 776876f009ec4d55774719f09d83afca
- SHA1 ebf654910f113e895178c041a1e1f5bdf8ccbb7b
- SHA512 8c3766f5fa63cc99199ff0e0f1a9783229694495488f89f7eed913f2a6ef8075bcacaa703388991c41cb304c8a43a47cf844075e381a890fa596055d3b40e01e
- SSDEEP 49152:Dn6tDCjZjW4AWnf6a/QkTZYkCm4EnqnbqYkaws2G7M2qljnNXHJ2DEwy:DSmVq4YCQk9IEn4/kanFM2qljNZXH
- TLSH T1D2F53307FFC2A27DD292613261945B89121FBD7A1BB60D93FBA9845C83E05C4497B33B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1