Overview

overview

9

Static

static

8

2026-09-23...ze.exe

windows10-2004-x64

9

2026-09-23...ze.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-09-23_1d02c3d5eade887dac3ce2988a889804_bkransomware_elex_maze
  • Size 2.4MB
  • Sample260924-qbppcssw5l
  • SHA256 157d2a92ee2bd87b2a846cf93af6bae8664bb398c8a61e3941a5892f71ab0eb6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
revoked_codesign

Malware Config

Signatures

  • Revoked Certificate in Chain 1 IoCs

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

    revoked_codesign
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2026-09-23_1d02c3d5eade887dac3ce2988a889804_bkransomware_elex_maze
    .exe 2.4MB

2026-09-23_1d02c3d5eade887dac3ce2988a889804_bkransomware_elex_maze

  • IMPHASH 2e594bce14c53b0d6da577a5f4ee676f
  • SHA256 157d2a92ee2bd87b2a846cf93af6bae8664bb398c8a61e3941a5892f71ab0eb6
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx86arch:x86

  • Revoked Certificate in Chain

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

    revoked_codesign

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
2e:bf:9a:44:f9:e9:3e:13:aa:3c:24:c3:22:ef:ac:8f:09:49:14:fa
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Smart Finekspert\, TOV,OU=IT,O=Smart Finekspert\, TOV,POSTALCODE=54017,STREET=Dekabrystiv\, 38A/9,L=Mykolayiv,ST=Mykolayivska,C=UA
Minor OS version
1
Major OS version
5
Entry point
1909150
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths