2026-08-27_f06f4795b2bc384ea45010ff5b39f956_bkransomware_elex_karagany_maze_rhadamanthys

General

Target
2026-08-27_f06f4795b2bc384ea45010ff5b39f956_bkransomware_elex_karagany_maze_rhadamanthys
Size 143KB
Sample260828-cnajbaseqb
SHA256 aa8e8dec57ef8f95d8ecedebe34d90251a471e89cb5c6ac739772764530e66ff
MD5 f06f4795b2bc384ea45010ff5b39f956
SHA1 cf7997598625f1e3897db996ad69bccd371d2b63
SHA512 d3109623c9abccff09fb91b9b10c945fd0c27a1532934c20c96e56ee54718ea3ef370786b1953e25dd81d0c7e881a32b2c24e510e0806b6e40ee9e47683ec56b
SSDEEP 3072:7+HcL2/CfIfPQ+kS62FxyjEoZ/+5l7Vjp9:CvfvkSjx4EQ/+Np9
TLSH
T194E35A43BC914C61D0B2023DB5B4FB5C467BF8F199E44D5A6EB842C9397B2A0BB2171E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-27_f06f4795b2bc384ea45010ff5b39f956_bkransomware_elex_karagany_maze_rhadamanthys

2026-08-27_f06f4795b2bc384ea45010ff5b39f956_bkransomware_elex_karagany_maze_rhadamanthys

.exe 143KB

IMPHASH 4b0a5cb1aa0992ea9901768198fd3e7e
SHA256 aa8e8dec57ef8f95d8ecedebe34d90251a471e89cb5c6ac739772764530e66ff
MD5 f06f4795b2bc384ea45010ff5b39f956
SHA1 cf7997598625f1e3897db996ad69bccd371d2b63
SHA512 d3109623c9abccff09fb91b9b10c945fd0c27a1532934c20c96e56ee54718ea3ef370786b1953e25dd81d0c7e881a32b2c24e510e0806b6e40ee9e47683ec56b
SSDEEP 3072:7+HcL2/CfIfPQ+kS62FxyjEoZ/+5l7Vjp9:CvfvkSjx4EQ/+Np9
TLSH
T194E35A43BC914C61D0B2023DB5B4FB5C467BF8F199E44D5A6EB842C9397B2A0BB2171E
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

5448

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths