2026-08-09_4ef5bba7388e5e0289fe540a4d45ca53_elex_floxif_maze_rhadamanthys_smoke-loader_stop

General

Target
2026-08-09_4ef5bba7388e5e0289fe540a4d45ca53_elex_floxif_maze_rhadamanthys_smoke-loader_stop
Size 269KB
Sample260809-hm3flasfnf
SHA256 fe1bdbd3ba6df0814353553adb01747d6fb763d8976690476e07754326380ee6
MD5 4ef5bba7388e5e0289fe540a4d45ca53
SHA1 9f613d0c42df963df83b980bc7324e2bb2bea03c
SHA512 efce3c13ae30ec11679ed55d5cc660c95fcf82a26e315969b3509e86ad56dd9b8f46af56b7defc4bd050e5b5c243c4d3b7cd57485b65af7bea2990b4f1dbce84
SSDEEP 6144:RaEoznVItjGFPy8wjNADjBV+UdvrEFp7hKSH6:Ra/LGsFPyHZkBjvrEH7DH6
TLSH
T17244BE6132C0C3FBC5A2117178A8D75052E6FC3E8EAA5857B748370C6E3D1D2AB29B57
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-09_4ef5bba7388e5e0289fe540a4d45ca53_elex_floxif_maze_rhadamanthys_smoke-loader_stop

File Explorer

2026-08-09_4ef5bba7388e5e0289fe540a4d45ca53_elex_floxif_maze_rhadamanthys_smoke-loader_stop

.exe 269KB

2026-08-09_4ef5bba7388e5e0289fe540a4d45ca53_elex_floxif_maze_rhadamanthys_smoke-loader_stop

IMPHASH e4318fe059493b307c8841deafc806a6
SHA256 fe1bdbd3ba6df0814353553adb01747d6fb763d8976690476e07754326380ee6
MD5 4ef5bba7388e5e0289fe540a4d45ca53
SHA1 9f613d0c42df963df83b980bc7324e2bb2bea03c
SHA512 efce3c13ae30ec11679ed55d5cc660c95fcf82a26e315969b3509e86ad56dd9b8f46af56b7defc4bd050e5b5c243c4d3b7cd57485b65af7bea2990b4f1dbce84
SSDEEP 6144:RaEoznVItjGFPy8wjNADjBV+UdvrEFp7hKSH6:Ra/LGsFPyHZkBjvrEH7DH6
TLSH
T17244BE6132C0C3FBC5A2117178A8D75052E6FC3E8EAA5857B748370C6E3D1D2AB29B57
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

cb:07:88:62:f5:5f:73:e8:cf:cd:f7:8a:e2:cd:a8:b5:5d:28:a0:5c:5a:98:bf:33:d5:65:c9:24:a7:c0:a9:da

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=AutoIt Consulting Ltd,O=AutoIt Consulting Ltd,L=Birmingham,C=GB

Chains

Mar 15, 2018

CN=AutoIt Consulting Ltd,O=AutoIt Consulting Ltd,L=Birmingham,C=GB

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Serial Number

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Revocation Status

Not revoked

Timespan

Jun 15, 2016 - Jun 15, 2024

Subject

CN=AutoIt Consulting Ltd,O=AutoIt Consulting Ltd,L=Birmingham,C=GB

Serial Number

42:f7:ce:c0:08:6a:c8:87:bb:81:ba:16

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 24, 2018 - Jul 4, 2020

Subject

CN=GlobalSign TSA for Advanced - G3 - 002-01,O=GMO GlobalSign K.K.,C=JP

Serial Number

27:7f:58:e8:a0:55:01:a8:89:fc:bc:f5

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Feb 28, 2018 - Mar 18, 2029

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:31:89:c6:50:04

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 2, 2011 - Mar 29, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

1

Major OS version

5

Entry point

45071

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

2026-08-09_4ef5bba7388e5e0289fe540a4d45ca53_elex_floxif_maze_rhadamanthys_smoke-loader_stop

PE Signature issue

kernel32

advapi32

generic

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_4ef5bba7388e5e0289fe540a4d45ca53_elex_floxif_maze_rhadamanthys_smoke-loader_stop

PE Signature issue

kernel32

advapi32

generic