General

  • Target
    2026-08-12_ce84f0b318c15dd44e6c572ea9a4029c_bkransomware_elex_maze
  • Size 3.5MB
  • Sample260813-ad176sfe26
  • SHA256 0ccdf4fb0cb575ce15eda67c8fdb6855e98f99e3008792a7cfd4961197094820
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-12_ce84f0b318c15dd44e6c572ea9a4029c_bkransomware_elex_maze
    • Size 3.5MB
    • SHA256 0ccdf4fb0cb575ce15eda67c8fdb6855e98f99e3008792a7cfd4961197094820
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

    • Detects binaries and memory artifacts referencing sandbox product IDs

    • Enumerates VirtualBox registry keys

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Stops running service(s)

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v16

Tasks