37a326430dccc37da442c65c00e154fbdfe0e253bf8644b6c8711cce700d0625

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-16_727b6e38aa6b96fd7482dcb22977e311_elex_maze_rhadamanthys
Size 4.8MB
Sample260916-za55dsvgmf
SHA256 37a326430dccc37da442c65c00e154fbdfe0e253bf8644b6c8711cce700d0625
MD5 727b6e38aa6b96fd7482dcb22977e311
SHA1 585b09162a4ddc482c3a6755f59bf39e3787773f
SHA512 cec0b92454fe85e5877056b8e18150c95e6a42d696d1a411b47c87b1b070804b7b7b2db3c22dd435296d497bf9d994edc53aa3cf177462571bd3e2744591a22e
SSDEEP 98304:/6/GPXn2rJM0qFBH4pyhis4N+XYNgKM88Co0cCuIA/gK04Z6JEi5bOmslaN:4M2r5qr4wAsoPg3pjtiY8z5bR
TLSH
T1B43623A15962F4A9E217107B28952CC36E213C6DE791697F0FC1B7336D33426FB2621B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  2026-09-16_727b6e38aa6b96fd7482dcb22977e311_elex_maze_rhadamanthys
- Size 4.8MB
- SHA256 37a326430dccc37da442c65c00e154fbdfe0e253bf8644b6c8711cce700d0625
- MD5 727b6e38aa6b96fd7482dcb22977e311
- SHA1 585b09162a4ddc482c3a6755f59bf39e3787773f
- SHA512 cec0b92454fe85e5877056b8e18150c95e6a42d696d1a411b47c87b1b070804b7b7b2db3c22dd435296d497bf9d994edc53aa3cf177462571bd3e2744591a22e
- SSDEEP 98304:/6/GPXn2rJM0qFBH4pyhis4N+XYNgKM88Co0cCuIA/gK04Z6JEi5bOmslaN:4M2r5qr4wAsoPg3pjtiY8z5bR
- TLSH
  T1B43623A15962F4A9E217107B28952CC36E213C6DE791697F0FC1B7336D33426FB2621B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/FileInfo.dll
- Size 1.2MB
- SHA256 fe577e6af8fd32d800d292d12e02358359fda97b9a376b60c20453798003a50a
- MD5 db196b83cd9fbfceaaa3e5560f0a187d
- SHA1 de234f418cef7ff87dc5737dbb8423eac51306e2
- SHA512 0468911a356f11faeea256f6e6d8ea70ff2ea4adf8f3e041eab86dbeec882823c8f0d00f747a3477c3d877106cfa90d8c1e6059cb0cb52671ce155dd84af91fe
- SSDEEP 24576:zPt6/WIZSALHQZWhIuO1EY28XTvO0ONVBz87VtiqC:z0WtAzhhOdXTGBvBz87VtiqC
- TLSH
  T162455C116286C277E55E01B01B2D9E7E506C75302B6088CBF7C46F6EA9F0DD29632EE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/RCWidgetPlugin.dll
- Size 3.4MB
- SHA256 a6389a33c27b1ca3579b123781cb28f11336861bb2435d9e5906e942f1cc37d2
- MD5 06804039ba720dbb60232aff87ddf0d0
- SHA1 1bb0b48c816271701e0e237998da27634e3b44ac
- SHA512 7b203977d6794886130b72881c1e219c1a47cbc3eba11d2e62fbab34ea9f3b2ed9c7e8fd08768e1476a56069270a4046c93796be992df82c0c0e324e2d0d4795
- SSDEEP 49152:8X3z9pQajjCWDrSRKtGRZuSJDpU0Yo3oEdOT9SUh/1PgTQPNICAk4doPd1:8HzbPn/BcpVU0YOooPQ3
- TLSH
  T1E3F59E11B7828172E68E0172166D9AAF44783E14076548DBA3C83F3FAE715E3773BA17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 27KB
- SHA256 0b399864057723bd388f8924baca252f8ca582287f5862460d042bfb8d2f11bc
- MD5 219b2454333b6a78e6a365bbaab66321
- SHA1 44224f5bea0d9b1d39da783273277e2750c81444
- SHA512 5e87a00c7dd23d26c7287c5d082721d37893a6408adcd9dda272499143e5cbe84177d62c611131f7b4e242693510d658630ebb3721007758cc9eb348d5282e39
- SSDEEP 384:HxoXlBT3SaMINWf52+4kb1VYnYPLYZJzk/holCZsHL0Fu8JN77hh1nY:HypSvIWb3J2iClfC3hbY
- TLSH
  T144D25C42AB651CF2FAD68E3930E4F52B5D30B7D067D1C8E756A9C4406FC17D229B818E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/libcurl_x86.dll
- Size 2.1MB
- SHA256 97b88d15406bdd99e4b2c89d1e366a400bc96d31dd4987c8fa02733c6296ff83
- MD5 d2ca43a21ec1681e36bf5fc79a4d2b78
- SHA1 1900808917de89cf3ceef7a50f33c24e0041294a
- SHA512 3086da224b6886448b802c66eaaf909b236343bdb3a25a7a187a92a287068519703e23fd8c79e8b831c868374f59613d28560e0d706912bfc96be39875f89526
- SSDEEP 49152:XGUR9r6hl8IXBPZ68L20v/SU8Y7NriOPquwgtJIpT:XGUR9r6b8IbBLjv/SUp7NriSo
- TLSH
  T1AAA5AE02FB8185B2E6DB427862FA677F8E3A55205328C9D3C79138749D201D2773E79E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  2345LeakFixer.exe
- Size 128KB
- SHA256 4f3a00ade4d7c92e1975176916ca46f5aa9de60fd3e330615332d83de9e8309b
- MD5 db4280413ac417ea0d6258f78efe1f06
- SHA1 512488254c21b2311123806797aef06b1b489c8c
- SHA512 721d2b43fd178453f7d75a6e49170d17984550b654c26b182a4b1e8b324c4680c3973e3961e6d167c52beb98b59d5405ad9cb7ee44c43e60b57f5506802780d4
- SSDEEP 3072:DIIIIgdv/UVcfkRkOjmn0AXlILP+b7jQ5wWh+fFZB/iICTuR427lGElV:DIIIIgxkolI7+bwJTeL
- TLSH
  T196D37E6275C18599F60A863110A81AB971323E7F2B506ACF5780BF7539723C1BD73A2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  2345MPCSafe.exe
- Size 614KB
- SHA256 17ea857477d1a07e36760ff9f1cc2afa98ec41005931051e5ad11b82b04777a0
- MD5 f8d5a7108a978a64ac92bcf826669dea
- SHA1 50392639d26fc670e5f4965fb697f612e3af642e
- SHA512 7a07707ad284ea7f0a6bf2f6c79259edfa63d052ac3613225938363ba075e3641c957bb158475538e5e6932a97fd2308e7f21749ab39a018abcabaccc103c53a
- SSDEEP 12288:S9Uld8ULeNfDvTGt32hARs9EFdcIbiENwJTZdm5GwZX:zL4rvCtG6uIbiENwfu3X
- TLSH
  T166D45B103721C236FF82D173176ADB6B51796E685F6305CF52D43B79A8312F2263EA22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  2345NetFlow.exe
- Size 85KB
- SHA256 b02df084027945d703566689b04b13ccc3048be525176732136d63617f977ea2
- MD5 df3ab871daad0a839b4d55476f57d904
- SHA1 5d39b3377c0da41b2f74752acae99ba827ef406d
- SHA512 ba3f4d971efdc4c59b478c1e79af1c788c98de97394811b6026f45b05079724cf140e816e58dd9ca4807cada1c3727f5a9f4dd65e4e3eded133a76dabdcf605b
- SSDEEP 1536:4rIIIIJ4VdCYaJYnQzeevLbheevLbmJE8A76MlGT7Al2T:cIIIIyEJtzXvpXvOJC7lgElY
- TLSH
  T17D837C112AD2A062D4C2C67029745A6A71773D2F6F902FC757807E35B8B2BC17A3236F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  2345NetRepair.exe
- Size 85KB
- SHA256 48df8652524b71cecb58004f7bdb66390edda1f9b60d44e79bcc5efe6cbf4497
- MD5 8529d6e164e23109cef9cfa3c6afb0d6
- SHA1 ac114ac0c39b34c072398edabc1333f8c3cd2117
- SHA512 cc71b0ec6ffab562ebdeff520e1f106e05e3eee92f9a31cc7344030184520a69ace905ee379f2a16286a3eeee69bc90953fa91929b42712c434687af510c7134
- SSDEEP 1536:NrIIIIT+NDzYa2mN+3HZGEFBInwCAZGEFBInwCoSGeJ876Mlph7AloZ:dIIIITyT2J5GEHasGEHaoSM7l7ElK
- TLSH
  T1BE8317E19B828AA8E902C07458714E3FC46FAD395F9019CB0A5EBE350F6B3C365B545F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  2345SafeLock.exe
- Size 87KB
- SHA256 2d5a1e8247c321d507ceef431ca91f8e123c958cbd498c33e271a9bb192a23e7
- MD5 c547d69ac6ecb1984b142d6791f06011
- SHA1 a088185ee90e9cca9b4f64b9d502a92119de8b9a
- SHA512 adedae7ea45975ccf9dd820c4b1f6389bf3d41e2938abb9332035718157f647a9cb45c0b0263f2f62a856e6af7aad8cc02619786c89278c5c45abe3e80b6788d
- SSDEEP 1536:orIIII2rPR63tYNLgwUZGGMwIFThQlxwGGMwIFThQlx1iTB76MlIwz7Al6a0:sIIII2r5vMdZGGMw+QsGGMw+QhiTB7lT
- TLSH
  T17A9359126AD29065D5C2C57010685A7AB5727E3F2F506ECF1784BF3279722C2BE3272E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  2345SafeSvc.exe
- Size 1.1MB
- SHA256 3f30c53614cdcef693926378e3a27bd98026d8cea1535a9cf6f21c2efe24acc6
- MD5 351e99b7d42cd8ef16d24305e2979516
- SHA1 aee4a9654a2458596fd39a5f32a19c51b425505a
- SHA512 35a2e2b7a1bd29af899ce47dc1f4e23282b8fdc983c10eff8430a38a2fb8b683dcfbd2f852100c0f8b0ec6fab91094112c0dbfedd98d6cdbf44baa213b1cd028
- SSDEEP 24576:Uq5bvAJF2DtrfK5RUy+AJW7JJQ5aMLngzDfNwchge:VRry7jW7JJQ1gflwOge
- TLSH
  T122457D707A83C437CA9221714ABDDA5E215DBD611F2259DB93C8373EEE704C21B3266B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  2345SafeTray.exe
- Size 1.4MB
- SHA256 afa1fffc42252d28791ca75c98fa38b7a604f9ec35f92a7b5fbb4df3f217cfe4
- MD5 2e456f7e7bb08d75291bc993cb877fa5
- SHA1 df64383908291ddc66467760415dd1298a0deeb4
- SHA512 dc373621a3481ba54ef3a9219a15bfd7d149d45f15c33eaa0c93b59cd0ab6393c8aa79eec181ce95f5854b525119434f6d495d9ddc117b28e500cd1d997b669b
- SSDEEP 24576:d4a1ckMZRSC0CMYScrYRNZQYivT+8zVQ7T0IdTmPdp+LwzxNwiZj5Ps9jM+qai6J:d40ZMZRSCHM3ccRNav7O7T00Tap+LwvY
- TLSH
  T133654A207346C626FAA181B1171CDE1A51687E742B6314CFF3C43B3968B1AE35B3AE57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  2345SafeUpdate.exe
- Size 663KB
- SHA256 e7883c35061c9209e479437b264c5b19996fe1cf623bb46b07243cf697cb3074
- MD5 89d9c29cc6c262a194277b2a159dfd87
- SHA1 90d0029d3400c3ce1c70317f843b2aaf2ef5e921
- SHA512 71fef65f9529989a76e143458a844681414cc40d66bc7c9144dddf26ff435a306f0fd9f832ba720807d59e2e953cca5158d9b498f347335f61a0f826f626e96e
- SSDEEP 12288:95/LsKExekSv8fyIP6wQkm+AICsRkP34u0tLfkDj8kUeqvof:9l4KExeki8fyIP6hVICAArQSqo
- TLSH
  T104E40721A205C727D99540F0271C9E6B90587D3827A598C3F3C90F7A64F2ED76A3AF1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  2345Setting.exe
- Size 87KB
- SHA256 dfd209dda859a628e5ccb3d192e37624468c1b51397cdf81c164d9aa27279c65
- MD5 76ef34140e4fc23dc74ddccdd88b1eb4
- SHA1 901e97e9968e3132cdd975f3e2d8332aa5b489fa
- SHA512 bd11464c4b93bf34463636dab23d519d54d5a8cac2320c7315e7758daacaf2687a00416a3c6b894a4f86eb779fe61f78cea1f0ae401e2f00fd9f995a304e9c06
- SSDEEP 1536:LbIIIIJGUwTiZ49fWlkhyIOiAxkhyIOiAOe798776MldBL7Al8Xz:HIIIIe1elkhcxkhcOeq77lfLEl8j
- TLSH
  T110934B527AC3C4E9E452867114644A7EB0367E3F1F105ACF2780FB6265722C1BE77A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  2345ShellPro.exe
- Size 1.4MB
- SHA256 6cb5744362a3bc0d2b7d0e3bfc0360cf11c61c13cc861c7c927efd58afc7c075
- MD5 f74d617f1e7f9c021d49bbba0505c1c9
- SHA1 11cae1a6a6342f25402913c0915056eba75dcc2d
- SHA512 aa56efd5d7836a57cf8ef41adf9cc7cf87aebeb3e10fff9d4554e9b6fb3fd70eba24af533b55ba8363111b1d00cb1789a58f2cf3539bb224a2fe8198d218cffe
- SSDEEP 24576:pfuq4qRAnrvim1/8JNT3Rhe434VDn284QyFXbB1D06fkT477ESpes5NwOVh7anWI:pfu+yv9AT3zCn2jP1DVkTS7nwch7anWI
- TLSH
  T12E653970B646C626E95101F0562CAE6B50547D342BA258CBF3C43F6EA4F1EE35A32F1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  2345SysDoctor.exe
- Size 85KB
- SHA256 b707fc3380c7a00f502585d144506d855b9bb02e7bbc5980990019cd8607d03e
- MD5 7446065a743b1d5061f7024ee81cd284
- SHA1 27af507d2e72714972a55cd965dd7abe2d26b9d4
- SHA512 3d033fc5cfdcdb7c42577c22791f20bc59bf5249713d7bb87d8586bc236414d4d5e964c14d78f1a4d29cf1bb65fd02612fb2113f38c78ddbaf0fac8d15590575
- SSDEEP 1536:zbIIIIjdNr746D1qFhFV5MpfzfUVhFV5MpfzfUI06D76Ml47AlwiD:vIIIIjLjDQFhurfkhurf7047l4EllD
- TLSH
  T1C1836C317AD29055D8C1C5B01A385A6975B2BD5F2B416ECF178CBD327A723C2B63132E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32