General
- Target 2026-07-20_59694f89a2ff3c0da85ea0fb2055743b_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- Sample260720-rxexqads7p
- SHA256 287e46f4ff82d29afbe59dce726c8b99830d08c6ca1b8e8ffc1dec714f7638af
- MD5 59694f89a2ff3c0da85ea0fb2055743b
- SHA1 766f9461a6b53bb3b5aa020e9351a0ecb564cef9
- SHA512 cc74b155ce943d8e1d721a1c445b014d4cbcb5bd50b463ff58f451673390849832d284b2269f759d561971955c55fb667ebc2b98973f2798cff619e7005b0190
- SSDEEP 98304:D2qt1TnuqET0JOsdunViOFJlQaymXjLY9McT1FoJikxGXZ3jOTecCim:aqvnPgmcMOkmzL0MitXpqecE
- TLSH T120F533437770D13BD07D1D7548EC8660A7EEAFD611AE389A371072BE58220C16CADBB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_59694f89a2ff3c0da85ea0fb2055743b_bkransomware_elex_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_59694f89a2ff3c0da85ea0fb2055743b_bkransomware_elex_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_59694f89a2ff3c0da85ea0fb2055743b_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- SHA256 287e46f4ff82d29afbe59dce726c8b99830d08c6ca1b8e8ffc1dec714f7638af
- MD5 59694f89a2ff3c0da85ea0fb2055743b
- SHA1 766f9461a6b53bb3b5aa020e9351a0ecb564cef9
- SHA512 cc74b155ce943d8e1d721a1c445b014d4cbcb5bd50b463ff58f451673390849832d284b2269f759d561971955c55fb667ebc2b98973f2798cff619e7005b0190
- SSDEEP 98304:D2qt1TnuqET0JOsdunViOFJlQaymXjLY9McT1FoJikxGXZ3jOTecCim:aqvnPgmcMOkmzL0MitXpqecE
- TLSH T120F533437770D13BD07D1D7548EC8660A7EEAFD611AE389A371072BE58220C16CADBB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1