General
- Target 2026-08-17_7f202d19a155e7e07472e7c94af09c27_bkransomware_elex_maze_rhadamanthys
- Size 2.2MB
- Sample260818-ajdn3abm8z
- SHA256 8b5d5992eee88fbd134666c8b49e290487a82322307abb05bd6008b6e459792d
- MD5 7f202d19a155e7e07472e7c94af09c27
- SHA1 4fc1e3c61f343175e75fcec6ea3a81d845bc361a
- SHA512 ab525a81926464bbd382831fa31c6901d61181e3c2b9f84ce0a90f5c298cfdb34908f78103c5a60ea5c67bd00806f22bfffb52ae6e34a35b6ac95d576268decf
- SSDEEP 49152:DIAJtLen25DAZqWj7xyAz+LqnIp2+NcquAQAMkYTIMnLuKcj6in9DSVeD:DIAJta25DAkWjdvaLz27TAxYTJn1Pint
- TLSH T151B5337361C55171F0C31237EEB056A58D8E3F62BA728D97FAE1224D56302904F6EB2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_7f202d19a155e7e07472e7c94af09c27_bkransomware_elex_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_7f202d19a155e7e07472e7c94af09c27_bkransomware_elex_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_7f202d19a155e7e07472e7c94af09c27_bkransomware_elex_maze_rhadamanthys
- Size 2.2MB
- SHA256 8b5d5992eee88fbd134666c8b49e290487a82322307abb05bd6008b6e459792d
- MD5 7f202d19a155e7e07472e7c94af09c27
- SHA1 4fc1e3c61f343175e75fcec6ea3a81d845bc361a
- SHA512 ab525a81926464bbd382831fa31c6901d61181e3c2b9f84ce0a90f5c298cfdb34908f78103c5a60ea5c67bd00806f22bfffb52ae6e34a35b6ac95d576268decf
- SSDEEP 49152:DIAJtLen25DAZqWj7xyAz+LqnIp2+NcquAQAMkYTIMnLuKcj6in9DSVeD:DIAJta25DAkWjdvaLz27TAxYTJn1Pint
- TLSH T151B5337361C55171F0C31237EEB056A58D8E3F62BA728D97FAE1224D56302904F6EB2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1