General
- Target 2026-07-23_953d22a6f15bf17fbd5096cfc853d52a_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- Sample260723-v1fj7stdnc
- SHA256 6d6dd36df26d747a1aae8f09c7fad3aec1cd93ad33e2bb08a7aba30af6332ce0
- MD5 953d22a6f15bf17fbd5096cfc853d52a
- SHA1 af7d2cebdbf4417b46d0885fce5251c23f7aaad7
- SHA512 eff7ae5311ef1142f1f407ab992ebf91dfe6563573c8ecd65127f2e1b4b1684a065cb7e29de2269755b62b4e8194a17157f4e502e26379373ecc89fed0276dd7
- SSDEEP 98304:DeG2l9WPdImFVxKtSo9uHGXpC28sCAul00LYCfv:CG2jWyKq5ubbB5l0Wv
- TLSH T1CBF533232AC4432DF89122785C9C4BA806FD7B6245EB1C5183CC5ADFB2952E8DD2D7B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_953d22a6f15bf17fbd5096cfc853d52a_bkransomware_elex_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_953d22a6f15bf17fbd5096cfc853d52a_bkransomware_elex_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_953d22a6f15bf17fbd5096cfc853d52a_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- SHA256 6d6dd36df26d747a1aae8f09c7fad3aec1cd93ad33e2bb08a7aba30af6332ce0
- MD5 953d22a6f15bf17fbd5096cfc853d52a
- SHA1 af7d2cebdbf4417b46d0885fce5251c23f7aaad7
- SHA512 eff7ae5311ef1142f1f407ab992ebf91dfe6563573c8ecd65127f2e1b4b1684a065cb7e29de2269755b62b4e8194a17157f4e502e26379373ecc89fed0276dd7
- SSDEEP 98304:DeG2l9WPdImFVxKtSo9uHGXpC28sCAul00LYCfv:CG2jWyKq5ubbB5l0Wv
- TLSH T1CBF533232AC4432DF89122785C9C4BA806FD7B6245EB1C5183CC5ADFB2952E8DD2D7B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1