General
- Target 2026-07-23_02f87c1611ec1002cd42291f19c23761_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- Sample260723-raznlsdq6v
- SHA256 fd82744be10326da4223dfe943e9bb4a414ce56e3305c87d20171b032a2ab801
- MD5 02f87c1611ec1002cd42291f19c23761
- SHA1 408facc729e7b5a12cb5fc98e71d2aa95aa235e5
- SHA512 47c7a26baf141db3a839757f9e75d6d76b862d670f2642e79c081ad6b125a99e1b69b0dc0d7997b1463a748371494cc5fd8fe49818df01b953bfcf8284657480
- SSDEEP 98304:DUfjr8IkBw1QJmL+mDrB/8EOMRE71kjpjBMmIWas6:Q38eDBTOWiApimrh6
- TLSH T138F5330775CADAD8F6AAEE3AC47D05A05617F4354A9D490B1A83480AEF683F10F34B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_02f87c1611ec1002cd42291f19c23761_bkransomware_elex_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_02f87c1611ec1002cd42291f19c23761_bkransomware_elex_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_02f87c1611ec1002cd42291f19c23761_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- SHA256 fd82744be10326da4223dfe943e9bb4a414ce56e3305c87d20171b032a2ab801
- MD5 02f87c1611ec1002cd42291f19c23761
- SHA1 408facc729e7b5a12cb5fc98e71d2aa95aa235e5
- SHA512 47c7a26baf141db3a839757f9e75d6d76b862d670f2642e79c081ad6b125a99e1b69b0dc0d7997b1463a748371494cc5fd8fe49818df01b953bfcf8284657480
- SSDEEP 98304:DUfjr8IkBw1QJmL+mDrB/8EOMRE71kjpjBMmIWas6:Q38eDBTOWiApimrh6
- TLSH T138F5330775CADAD8F6AAEE3AC47D05A05617F4354A9D490B1A83480AEF683F10F34B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1