General
- Target 2026-08-28_73dd1d470f8592eefc57344aa405d13f_elex_maze_rhadamanthys
- Size 685KB
- Sample260828-rlw2vsygla
- SHA256 14bde706aff7ca10171ff3f29811e8231f900bf2e1a8091e33c1eadc056ec67b
- MD5 73dd1d470f8592eefc57344aa405d13f
- SHA1 487612ea277cef745bede2032593ee7fa6200232
- SHA512 15787c23b7f6fc4fd495ba1f1f3be5db721f3e4481511541851635544fd3a95971cbdaf262e823ed0116fa78f97caa749d2828d348f1295bc3a962d3d7373bce
- SSDEEP 12288:CaIa55qDqIw+sN6KbsxYK4TUaOhW8MQ4j//kV1xHs3w36AdgCtU63:lIa55MfovbTUaOhWzLoXT36ANU63
- TLSH T1AEE40281B581C4B5E5F240352EF6A2384ABDFDF05E2A8D57B39C4FC95630181AB3A376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_73dd1d470f8592eefc57344aa405d13f_elex_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_73dd1d470f8592eefc57344aa405d13f_elex_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_73dd1d470f8592eefc57344aa405d13f_elex_maze_rhadamanthys
- Size 685KB
- SHA256 14bde706aff7ca10171ff3f29811e8231f900bf2e1a8091e33c1eadc056ec67b
- MD5 73dd1d470f8592eefc57344aa405d13f
- SHA1 487612ea277cef745bede2032593ee7fa6200232
- SHA512 15787c23b7f6fc4fd495ba1f1f3be5db721f3e4481511541851635544fd3a95971cbdaf262e823ed0116fa78f97caa749d2828d348f1295bc3a962d3d7373bce
- SSDEEP 12288:CaIa55qDqIw+sN6KbsxYK4TUaOhW8MQ4j//kV1xHs3w36AdgCtU63:lIa55MfovbTUaOhWzLoXT36ANU63
- TLSH T1AEE40281B581C4B5E5F240352EF6A2384ABDFDF05E2A8D57B39C4FC95630181AB3A376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Virtualization/Sandbox Evasion
1