General
- Target 2026-08-14_c1311faef00829af694a0015491b36a6_elex_maze_rhadamanthys
- Size 675KB
- Sample260814-pt66patcng
- SHA256 07d18746b3a1afea69ae87a6fc6321b4a31a5f7ae4b5e777d23fad1f9fc7088d
- MD5 c1311faef00829af694a0015491b36a6
- SHA1 99e0aa43c52c968a671cb37b649aca7c809f533a
- SHA512 a676a1c23e1d0cb0b5fb49df102a94901a03a408f99e186d98dd7dfc7e0996df258815feb0ca89f47579addcd4513148e69478946cd49cf2d72dd6059d608054
- SSDEEP 12288:vNxt2GCQZwqLIMRBeZHaElEZlBiZGXEtdrIsydYSYjXDwiYhT+63H:1xt2n6IQ2aEiriZUEtqr+ljXUiYF+63H
- TLSH T19EE4F129F9C58035E4A30A3549E4F27B457DBD715B6B9F4AFB480A0B3A305D07A2D3A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_c1311faef00829af694a0015491b36a6_elex_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_c1311faef00829af694a0015491b36a6_elex_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_c1311faef00829af694a0015491b36a6_elex_maze_rhadamanthys
- Size 675KB
- SHA256 07d18746b3a1afea69ae87a6fc6321b4a31a5f7ae4b5e777d23fad1f9fc7088d
- MD5 c1311faef00829af694a0015491b36a6
- SHA1 99e0aa43c52c968a671cb37b649aca7c809f533a
- SHA512 a676a1c23e1d0cb0b5fb49df102a94901a03a408f99e186d98dd7dfc7e0996df258815feb0ca89f47579addcd4513148e69478946cd49cf2d72dd6059d608054
- SSDEEP 12288:vNxt2GCQZwqLIMRBeZHaElEZlBiZGXEtdrIsydYSYjXDwiYhT+63H:1xt2n6IQ2aEiriZUEtqr+ljXUiYF+63H
- TLSH T19EE4F129F9C58035E4A30A3549E4F27B457DBD715B6B9F4AFB480A0B3A305D07A2D3A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Virtualization/Sandbox Evasion
1