General
- Target 2026-07-28_9a17e7de3eea20e930255005f68d7aff_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- Sample260728-lv7basge39
- SHA256 83e1bb7c38dc10e0f944d4728009c90d3ae789edd8013667c69ce3ca81b8072e
- MD5 9a17e7de3eea20e930255005f68d7aff
- SHA1 094a57fd9fcda50c6c552d80fc633c41cf2c4272
- SHA512 0f866725f087f4164fa6acdc35b3b46e8e4a08e8b5278995d1b3d06e455a5d7b4dc299d044afdbc890e95926b3e1d1f52122a985ba2d6b4b62a2bd3be427bf79
- SSDEEP 98304:DyuoYc6HxKTrziJmcdXQ46wqIxho25A+4ChKoW:BNRYrz6mAr6wrxho25llW
- TLSH T113F5332321A49134CCEBCD77D8F4C64865357E5CD4E889A723C6A8D892653922B3DB3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_9a17e7de3eea20e930255005f68d7aff_bkransomware_elex_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_9a17e7de3eea20e930255005f68d7aff_bkransomware_elex_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_9a17e7de3eea20e930255005f68d7aff_bkransomware_elex_maze_rhadamanthys
- Size 3.2MB
- SHA256 83e1bb7c38dc10e0f944d4728009c90d3ae789edd8013667c69ce3ca81b8072e
- MD5 9a17e7de3eea20e930255005f68d7aff
- SHA1 094a57fd9fcda50c6c552d80fc633c41cf2c4272
- SHA512 0f866725f087f4164fa6acdc35b3b46e8e4a08e8b5278995d1b3d06e455a5d7b4dc299d044afdbc890e95926b3e1d1f52122a985ba2d6b4b62a2bd3be427bf79
- SSDEEP 98304:DyuoYc6HxKTrziJmcdXQ46wqIxho25A+4ChKoW:BNRYrz6mAr6wrxho25llW
- TLSH T113F5332321A49134CCEBCD77D8F4C64865357E5CD4E889A723C6A8D892653922B3DB3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1