General
- Target 2026-08-14_cbe35086140a3422aa216a749bdb1b26_elex_maze_rhadamanthys
- Size 675KB
- Sample260814-pqa9vatalg
- SHA256 26af0d2a7189738fc34a66350a8c9dfaf5a29c22810f8dc390cba01a4d079ab6
- MD5 cbe35086140a3422aa216a749bdb1b26
- SHA1 5cd5120c437a8aa4ecabb8e6f243e8464cc0ac85
- SHA512 6a5c6689ee5e79cea6c1cecedac6156ab0daeb11616f16623608e4ace7ff38a557fdb1a67b78d7981a5f69f3c75a6357124bf9ccad3e6f7021bf5b43cba8cf3a
- SSDEEP 12288:vNxt2GCQZwqLIMRBeZHaElEZlBiZGXEtdrIsydYSYjXDwiYhT+635:1xt2n6IQ2aEiriZUEtqr+ljXUiYF+635
- TLSH T133E4F129F9C58035E4A30A3549E4F27B857DBD715B6B9F4AFB480A0B39305D07A2D3A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_cbe35086140a3422aa216a749bdb1b26_elex_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_cbe35086140a3422aa216a749bdb1b26_elex_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_cbe35086140a3422aa216a749bdb1b26_elex_maze_rhadamanthys
- Size 675KB
- SHA256 26af0d2a7189738fc34a66350a8c9dfaf5a29c22810f8dc390cba01a4d079ab6
- MD5 cbe35086140a3422aa216a749bdb1b26
- SHA1 5cd5120c437a8aa4ecabb8e6f243e8464cc0ac85
- SHA512 6a5c6689ee5e79cea6c1cecedac6156ab0daeb11616f16623608e4ace7ff38a557fdb1a67b78d7981a5f69f3c75a6357124bf9ccad3e6f7021bf5b43cba8cf3a
- SSDEEP 12288:vNxt2GCQZwqLIMRBeZHaElEZlBiZGXEtdrIsydYSYjXDwiYhT+635:1xt2n6IQ2aEiriZUEtqr+ljXUiYF+635
- TLSH T133E4F129F9C58035E4A30A3549E4F27B857DBD715B6B9F4AFB480A0B39305D07A2D3A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Virtualization/Sandbox Evasion
1