Overview
overview
3Static
static
32026-09-16...ys.exe
windows10-2004-x64
32026-09-16...ys.exe
windows11-ltsc_2024-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...in.dll
windows10-2004-x64
3$PLUGINSDI...in.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...86.dll
windows10-2004-x64
3$PLUGINSDI...86.dll
windows11-ltsc_2024-x64
32345LeakFixer.exe
windows10-2004-x64
12345LeakFixer.exe
windows11-ltsc_2024-x64
12345MPCSafe.exe
windows10-2004-x64
12345MPCSafe.exe
windows11-ltsc_2024-x64
12345NetFlow.exe
windows10-2004-x64
12345NetFlow.exe
windows11-ltsc_2024-x64
12345NetRepair.exe
windows10-2004-x64
12345NetRepair.exe
windows11-ltsc_2024-x64
12345SafeLock.exe
windows10-2004-x64
12345SafeLock.exe
windows11-ltsc_2024-x64
12345SafeSvc.exe
windows10-2004-x64
32345SafeSvc.exe
windows11-ltsc_2024-x64
32345SafeTray.exe
windows10-2004-x64
12345SafeTray.exe
windows11-ltsc_2024-x64
12345SafeUpdate.exe
windows10-2004-x64
2345SafeUpdate.exe
windows11-ltsc_2024-x64
2345Setting.exe
windows10-2004-x64
12345Setting.exe
windows11-ltsc_2024-x64
12345ShellPro.exe
windows10-2004-x64
12345ShellPro.exe
windows11-ltsc_2024-x64
12345SysDoctor.exe
windows10-2004-x64
12345SysDoctor.exe
windows11-ltsc_2024-x64
1General
- Target 2026-09-16_db5e516ce8d6ccccca3ea9db8bd2a41d_elex_maze_rhadamanthys
- Size 4.8MB
- Sample260916-tv77lashke
- SHA256 3f6a4efe2b272ab6fc4fd6a02682dd6ae50da573f9afb8283737c35f9e44c1e4
- MD5 db5e516ce8d6ccccca3ea9db8bd2a41d
- SHA1 c5fc2724cf768c27d60d585319819e695d2d57fb
- SHA512 8328489c7d35dcbc5da2724aa68dd30fe6c77196108de870437cca8d64d914ce27fdb3b7ac21e7293b6ecfa95e7bd1b8f37df65154ab5855b48c4e8ff879b2fd
- SSDEEP 98304:Vbv1ZoQNo0Ttzl0N0DqOh0EHgYUlo/gZz5T4CRfKm312jfNsKy1mwP//KrVwL:tBNr5zZqOhKSI6wfKNBsK4mwP6r6L
- TLSH T1B53623E15962B452E21A107728D11CC7AD203DADEB816A6F0FC5B7336E23526F73721B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-16_db5e516ce8d6ccccca3ea9db8bd2a41d_elex_maze_rhadamanthys.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
2026-09-16_db5e516ce8d6ccccca3ea9db8bd2a41d_elex_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FileInfo.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FileInfo.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/RCWidgetPlugin.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/RCWidgetPlugin.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/libcurl_x86.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/libcurl_x86.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
2345LeakFixer.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
2345LeakFixer.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
2345MPCSafe.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
2345MPCSafe.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
2345NetFlow.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
2345NetFlow.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
2345NetRepair.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
2345NetRepair.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
2345SafeLock.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
2345SafeLock.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
2345SafeSvc.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
2345SafeSvc.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
2345SafeTray.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
2345SafeTray.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
2345SafeUpdate.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
2345SafeUpdate.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
2345Setting.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
2345Setting.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
2345ShellPro.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
2345ShellPro.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
2345SysDoctor.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
2345SysDoctor.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target 2026-09-16_db5e516ce8d6ccccca3ea9db8bd2a41d_elex_maze_rhadamanthys
- Size 4.8MB
- SHA256 3f6a4efe2b272ab6fc4fd6a02682dd6ae50da573f9afb8283737c35f9e44c1e4
- MD5 db5e516ce8d6ccccca3ea9db8bd2a41d
- SHA1 c5fc2724cf768c27d60d585319819e695d2d57fb
- SHA512 8328489c7d35dcbc5da2724aa68dd30fe6c77196108de870437cca8d64d914ce27fdb3b7ac21e7293b6ecfa95e7bd1b8f37df65154ab5855b48c4e8ff879b2fd
- SSDEEP 98304:Vbv1ZoQNo0Ttzl0N0DqOh0EHgYUlo/gZz5T4CRfKm312jfNsKy1mwP//KrVwL:tBNr5zZqOhKSI6wfKNBsK4mwP6r6L
- TLSH T1B53623E15962B452E21A107728D11CC7AD203DADEB816A6F0FC5B7336E23526F73721B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/FileInfo.dll
- Size 1.2MB
- SHA256 fe577e6af8fd32d800d292d12e02358359fda97b9a376b60c20453798003a50a
- MD5 db196b83cd9fbfceaaa3e5560f0a187d
- SHA1 de234f418cef7ff87dc5737dbb8423eac51306e2
- SHA512 0468911a356f11faeea256f6e6d8ea70ff2ea4adf8f3e041eab86dbeec882823c8f0d00f747a3477c3d877106cfa90d8c1e6059cb0cb52671ce155dd84af91fe
- SSDEEP 24576:zPt6/WIZSALHQZWhIuO1EY28XTvO0ONVBz87VtiqC:z0WtAzhhOdXTGBvBz87VtiqC
- TLSH T162455C116286C277E55E01B01B2D9E7E506C75302B6088CBF7C46F6EA9F0DD29632EE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/RCWidgetPlugin.dll
- Size 3.4MB
- SHA256 a6389a33c27b1ca3579b123781cb28f11336861bb2435d9e5906e942f1cc37d2
- MD5 06804039ba720dbb60232aff87ddf0d0
- SHA1 1bb0b48c816271701e0e237998da27634e3b44ac
- SHA512 7b203977d6794886130b72881c1e219c1a47cbc3eba11d2e62fbab34ea9f3b2ed9c7e8fd08768e1476a56069270a4046c93796be992df82c0c0e324e2d0d4795
- SSDEEP 49152:8X3z9pQajjCWDrSRKtGRZuSJDpU0Yo3oEdOT9SUh/1PgTQPNICAk4doPd1:8HzbPn/BcpVU0YOooPQ3
- TLSH T1E3F59E11B7828172E68E0172166D9AAF44783E14076548DBA3C83F3FAE715E3773BA17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 27KB
- SHA256 0b399864057723bd388f8924baca252f8ca582287f5862460d042bfb8d2f11bc
- MD5 219b2454333b6a78e6a365bbaab66321
- SHA1 44224f5bea0d9b1d39da783273277e2750c81444
- SHA512 5e87a00c7dd23d26c7287c5d082721d37893a6408adcd9dda272499143e5cbe84177d62c611131f7b4e242693510d658630ebb3721007758cc9eb348d5282e39
- SSDEEP 384:HxoXlBT3SaMINWf52+4kb1VYnYPLYZJzk/holCZsHL0Fu8JN77hh1nY:HypSvIWb3J2iClfC3hbY
- TLSH T144D25C42AB651CF2FAD68E3930E4F52B5D30B7D067D1C8E756A9C4406FC17D229B818E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/libcurl_x86.dll
- Size 2.1MB
- SHA256 97b88d15406bdd99e4b2c89d1e366a400bc96d31dd4987c8fa02733c6296ff83
- MD5 d2ca43a21ec1681e36bf5fc79a4d2b78
- SHA1 1900808917de89cf3ceef7a50f33c24e0041294a
- SHA512 3086da224b6886448b802c66eaaf909b236343bdb3a25a7a187a92a287068519703e23fd8c79e8b831c868374f59613d28560e0d706912bfc96be39875f89526
- SSDEEP 49152:XGUR9r6hl8IXBPZ68L20v/SU8Y7NriOPquwgtJIpT:XGUR9r6b8IbBLjv/SUp7NriSo
- TLSH T1AAA5AE02FB8185B2E6DB427862FA677F8E3A55205328C9D3C79138749D201D2773E79E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 2345LeakFixer.exe
- Size 128KB
- SHA256 70db11d4e5b08ed09dc963f95e7d595820e09913556c2a820b9d1f034a4aa1c1
- MD5 a5128b50996762cfb7a8023c31c5a3a9
- SHA1 b698c626e42530b33b556132983bf5678f696810
- SHA512 0cf2f0dcd2c1864f7a84eaf61f5a3fe2bccff1b8d4fa9f3e526dd147c84991ea382628fd2033eb4587ab23ac80620b2770488f1cc36ee90cf8badf8d5240599e
- SSDEEP 3072:NIIIIgdv/VVcfkRkOjmn0AXlILP+b7jQ5wWh+fFZB/iICT274U7lQEl5k:NIIIIgxfolI7+bwJT8Lk
- TLSH T142D37E6275C18599F60A863150A81AB975323E7F2B401ACF1B80BF7579722C1BD73A2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target 2345MPCSafe.exe
- Size 614KB
- SHA256 66cc7eab6d1b51dd5a682d63bd257b2c3c1f5d1c098f85990c3f6b4d4bd4cb4c
- MD5 afb3d956314c7e382522b22353587844
- SHA1 d371db5b1a499fbf7432a4c1311ff24f7baf0581
- SHA512 7e85f0c8c2493f86a8ce87530fee1de1c01c118956d9e256d9dc0b005a3cd7c455d947b87fbade9ef1ba5ef5163dcfd6d75bfa5238519f0f9cfa10f7c643f658
- SSDEEP 12288:O9Uld8ULeNfDvTGt32hARs9EFdcIbifNwJTjdm5GwZ12:XL4rvCtG6uIbifNwFu312
- TLSH T11AD45B103721C236FF82D273176ADB6B41796E685F6305CF52D47B79A8312F2163EA22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target 2345NetFlow.exe
- Size 85KB
- SHA256 ec9b3b5f0209a5fdd689d8f821704b352fe8773c38c90bc6b087e74fa445313f
- MD5 33285e28362fe3ccea2fc769344d29e5
- SHA1 2c2fd52658eb9d98ec7d75672dd9241f2723801a
- SHA512 1e873c8083927cb43d059af820f1913ead4ff4a72862c1464490ec10288244d82e5455a625dea583711ddf7c88a6cb0e0812aef433927c866fa3b1e27e24c7f8
- SSDEEP 1536:5rIIIIJ4VdCYaJYlQzeevLbheevLbmTE8076MlM7AlysD:hIIIIyEJ3zXvpXvOTq7lMElND
- TLSH T14E837C112AD2A462D4C1C67029345A6A71773D6F6F806FCB53907E35B8B2BC17A3236F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target 2345NetRepair.exe
- Size 85KB
- SHA256 8d6af7a5b5767482d681ec764b46b3f6000f182f42a422914bbc2802ace239e7
- MD5 2cefb853d4f27db93f8398992001ef07
- SHA1 f8e6b51648079a445530784131156641c429cebb
- SHA512 d776de921ffce706b8d817ac582725e805058de5ff98bc5d26c0556647f9a0c85d6d22029b2de853d309d12956739a071399e98156f77a587b3771cf20640813
- SSDEEP 1536:LrIIIIT+NDzYa2mN23HZGEFBInwCAZGEFBInwC44GeJM76Mlrh7AltqW:XIIIITyT2d5GEHasGEHa4487lrhElj
- TLSH T1848317E19B428AA8E802C07458714E3FC46FAD795F9019CB0A5EBE360F6B3C365B545F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target 2345SafeLock.exe
- Size 87KB
- SHA256 b7ff1ca52a6dd3bd7e23a42ca6c10794a8c7968b46d71cd2bd5d874dcbbfac7f
- MD5 97df6b0b6cbea5fe4a458435c338a075
- SHA1 8ba188d5f83e6f5153c92173f271f685b4309adb
- SHA512 c593d52cc63c71401d62217759113eb9de5e470a563dd2f3b96517d8d2d2ebbe80031d734a83dc83272288d50028d141d1ff4765b4d12c4d8b2cf4ba214b0469
- SSDEEP 1536:3rIIII2rPR63tYNLgwUZGGMwIFThQlxwGGMwIFThQlxF4Ft76MlV7Aljj:bIIII2r5v0dZGGMw+QsGGMw+Q54X7lVi
- TLSH T1D79349126AD290A5D5C2C57010685A3AB5727E3F2F506ECF1784BF3275722C2BE3272E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target 2345SafeSvc.exe
- Size 1.1MB
- SHA256 9d2eb668203334e734f8263d725328b98168e1794049299d5b6edaf9f37671e8
- MD5 2f4bd73adbe65c2554bbcd58ed93b543
- SHA1 05cd0d3370108c00d23a35f02e2ed72401583737
- SHA512 c261780f57bd9c343fb46a16418234bbc162f0321c8602ebd04472c8d7f691aec8f51adfc8abf19fca3403713cb0545bfe73358e5b3fc4935cbea89ba769b1c0
- SSDEEP 24576:nq5bvAJF2DtrfK5RUy+AJW7JJQ5aMLngv/fNwuhg1:YRry7jW7JJQ1gHlw8g1
- TLSH T179457D707A83C437DA9221714BBCDA5E215DAD611F2259DB93C8373EEE704C21B3266B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 2345SafeTray.exe
- Size 1.4MB
- SHA256 63f16566001ff7e0572c4af36ca7322c845ce28ab0bfa41603b261db6dc352c6
- MD5 d71d3ec77a8af9588f6cb88382f7b36d
- SHA1 4d0c07fe9e5de01845992a98b19c57ace95e1ea7
- SHA512 baa91b3ed17aa43f33557b44e5bbfca3d9ab72441fdaa6375466c9045e52822e777162a6b3fde56b06a2dd354722e2856aee69aea32bfad79da0c4ea806fc745
- SSDEEP 24576:z4h1ckMZRSC0CMYScrYRNZQYivT+8zVQ7T0IdTmPdp+nAzxNwYZj5Ps9jM+qai6E:z4rZMZRSCHM3ccRNav7O7T00Tap+nAvr
- TLSH T164653A207346C626FAA181B1171CDE1A51687E742B6314CFF3C43B3968B1AE35B3AE57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target 2345SafeUpdate.exe
- Size 674KB
- SHA256 685d9f34859c1081bb39afb2036e2e1dc6af6a4edf719bead766e29c8d3aeed3
- MD5 eab77b8deaa4c7d8cb2d043d22d32255
- SHA1 508e091b635773cb15a3e26630d8afb4b94ee93c
- SHA512 9195f0165b45db340df3d2147a2e18013ac939cab28064b1d2f4a81fe70890dac8374dab4a149de75021b625d28e8b4e28bdcca7aebd2796855530b9504d7ac6
- SSDEEP 12288:Z5/asKExekSv8fyIP6wQkm+AICsRkP34u0tLfkDj8kUeqvoI:ZlbKExeki8fyIP6hVICAArQSq7
- TLSH T1D8E40821A205C727D99541F0271C9E2B90587D3827A598C3F3C90F7A64F2ED76A3AF1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target 2345Setting.exe
- Size 87KB
- SHA256 82a8ccaafa401e26fc2c9a3238a44eaa4e1d1bccd187955f8c68d819dd9234c0
- MD5 1ef68b0d249ed7424a6c786fa932588e
- SHA1 d22676022712ae0626826b44bd0e4cf50aacc1d7
- SHA512 c9aea7c3a7e1ae547c41f84a824588a85b9863fec4feee56ba1e24a014a2e007fa48e9981600d031193d6bd9f804536bd97df036eb1671948468adc7deaaa851
- SSDEEP 1536:1bIIIIJGUwTiZ49fflkhyIOiAxkhyIOiAOE798Qu76MlF7Al1q:VIIIIe1XlkhcxkhcOEqr7lFElw
- TLSH T1AD934B527AC3C8D9E456867114644A7EB0367E3F1F105ACF2780FB2165722C2BE77A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target 2345ShellPro.exe
- Size 1.4MB
- SHA256 5a4ed357d4961081ee28d3a0a3b073e25ade5e8619e9f215a35f39bca15c5d6b
- MD5 ebfb240e664ae917d1637d085ec19c9b
- SHA1 9c215b43b2d05115318cf70210ba7e32bce34b15
- SHA512 f6058bd7402e9d65f2be804cbc25093ed452b088e7d93d59be7982bbde71ed8ea23b1346a09c800118ed9fbf9e00bb20343c50cd7943db6b6509bb458f679c1e
- SSDEEP 24576:x8JXZDWn1nqnD7gy0aMlQk424S77+cj8lES2g6YMI4TDMJuikXe0cNws+IL4gL0q:CJls8N0flQs+Ug6YMI4TQJuqwxIL4gLr
- TLSH T1C96528707646C22BE56101F0562C9F6A50547D392BA258CBF3C43F2EA8F1DD35A36E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target 2345SysDoctor.exe
- Size 85KB
- SHA256 b5277b0a99b973cd6a78f39315fbbebb050dc0715a15e10228dc030c29b6f224
- MD5 86f10794d18f0d770da5e1aa08e917ad
- SHA1 fa21686a6e86b28c5a682cb19a5b417b598570a8
- SHA512 4adf7ba56f864ada179f710dcb01cb45caf5a0904f5fdfd88f61419af8a65a13829430f28a32f8799b9f0053af9313a2132f5b957f555d9ca9b782dd7050df03
- SSDEEP 1536:KbIIIIjdNr746D1MFhFV5MpfzfUVhFV5MpfzfU4+6d76MlC67AlJ9:KIIIIjLjD6Fhurfkhurfb+i7lJElf
- TLSH T13F837C317AD29055C8C1C5B01A385A6A75B2BD5F2B416ECF174CBD327A727C2A63132E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10