General
- Target 2026-08-19_acb5cbc7c4aa0b120069cf1503911e72_bkransomware_elex_maze
- Size 1.2MB
- Sample260819-wllcksgf83
- SHA256 a1efcb303e8f1d2a8faf2bbfdea3adb84a52216e7c18053c4d64dbb06d7d7c9c
- MD5 acb5cbc7c4aa0b120069cf1503911e72
- SHA1 6f0ed5373570730af8fb46708e1fbf58544f81c5
- SHA512 6edff3679270fa030c1ec14ad2eb0fb50c78e9dd9c580fbe12fc4d4fc107c9e7cd4502d70004ecccbb214e14aa344e52d5084bd27b36b7a0238df9ac0acb17ed
- SSDEEP 24576:rtu77onIhNRY5+i1s4SnQ/tbw/2Mkjy6Fr7g0oS:gonMNQD1s4SQ/lFTjN4
- TLSH T11355BF1077B5E426E5F252F069399731683EBC719B3484CFA380564E1EB4AD1EB3872B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_acb5cbc7c4aa0b120069cf1503911e72_bkransomware_elex_maze.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_acb5cbc7c4aa0b120069cf1503911e72_bkransomware_elex_maze.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_acb5cbc7c4aa0b120069cf1503911e72_bkransomware_elex_maze
- Size 1.2MB
- SHA256 a1efcb303e8f1d2a8faf2bbfdea3adb84a52216e7c18053c4d64dbb06d7d7c9c
- MD5 acb5cbc7c4aa0b120069cf1503911e72
- SHA1 6f0ed5373570730af8fb46708e1fbf58544f81c5
- SHA512 6edff3679270fa030c1ec14ad2eb0fb50c78e9dd9c580fbe12fc4d4fc107c9e7cd4502d70004ecccbb214e14aa344e52d5084bd27b36b7a0238df9ac0acb17ed
- SSDEEP 24576:rtu77onIhNRY5+i1s4SnQ/tbw/2Mkjy6Fr7g0oS:gonMNQD1s4SQ/lFTjN4
- TLSH T11355BF1077B5E426E5F252F069399731683EBC719B3484CFA380564E1EB4AD1EB3872B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1