2026-09-24_03747063f58ef9836d12c62b9c266fe4_elex_maze_rhadamanthys

General

Target
2026-09-24_03747063f58ef9836d12c62b9c266fe4_elex_maze_rhadamanthys
Size 290KB
Sample260925-tep13sfd62
SHA256 317351085f01970b990b2579deae119171d4657920f37638dba97ddaada6fa67
MD5 03747063f58ef9836d12c62b9c266fe4
SHA1 dc6ac44407c9d1a7ffdd9c599c62669cde55fafd
SHA512 bb5aa492b3e471afcb3c19ff0f1f4d901a0ef44a23ec49d7a4c6e9dd603bd1507223422eb810b17078105e92dbac37251ef5d57c75dfbd2b058d7aa47f8f231a
SSDEEP 3072:95Tng5ZTraELehe9egTdjN2ZFVh4HcBPeWc+tuqzfCmHwUTjHtO:9+5ZTrvTdjN2ZzegTQUTjw
TLSH
T1DF548E00B69080B9D07302735AF66735677D7D604FA28A0AE3885A2EDE316D0B775BF7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-24_03747063f58ef9836d12c62b9c266fe4_elex_maze_rhadamanthys

File Explorer

2026-09-24_03747063f58ef9836d12c62b9c266fe4_elex_maze_rhadamanthys

.exe 290KB

2026-09-24_03747063f58ef9836d12c62b9c266fe4_elex_maze_rhadamanthys

IMPHASH 68219430cf7495bea0769780dc8f569b
SHA256 317351085f01970b990b2579deae119171d4657920f37638dba97ddaada6fa67
MD5 03747063f58ef9836d12c62b9c266fe4
SHA1 dc6ac44407c9d1a7ffdd9c599c62669cde55fafd
SHA512 bb5aa492b3e471afcb3c19ff0f1f4d901a0ef44a23ec49d7a4c6e9dd603bd1507223422eb810b17078105e92dbac37251ef5d57c75dfbd2b058d7aa47f8f231a
SSDEEP 3072:95Tng5ZTraELehe9egTdjN2ZFVh4HcBPeWc+tuqzfCmHwUTjHtO:9+5ZTrvTdjN2ZzegTQUTjw
TLSH
T1DF548E00B69080B9D07302735AF66735677D7D604FA28A0AE3885A2EDE316D0B775BF7
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

61275

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

EnterCriticalSection DeleteCriticalSection WaitForSingleObject Sleep RaiseException IsDebuggerPresent GetCurrentThreadId CloseHandle TlsGetValue TlsSetValue TlsAlloc TlsFree QueryPerformanceCounter GetSystemTimeAsFileTime QueryPerformanceFrequency GetNativeSystemInfo GetVersionExW GetModuleFileNameW LeaveCriticalSection SetHandleInformation VirtualFree GetProcessHandleCount GetCurrentProcessId FreeLibrary HeapSetInformation GetCurrentDirectoryW GetFileType SignalObjectAndWait CreateFileW WriteConsoleW SetStdHandle SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW InitializeCriticalSectionAndSpinCount GetModuleHandleExW SetLastError GetVolumeInformationW LocalFree GetLastError GetSystemDirectoryW GetComputerNameW TerminateProcess ExpandEnvironmentStringsW LoadLibraryExA GetModuleHandleA VirtualAllocEx VirtualProtectEx GetProcAddress VerifyVersionInfoW FlushInstructionCache GetModuleHandleW SetEnvironmentVariableW GetCurrentProcess VerSetConditionMask SetDllDirectoryW GetEnvironmentVariableW MultiByteToWideChar VirtualQuery GetCommandLineW HeapFree EncodePointer DecodePointer HeapAlloc HeapReAlloc IsProcessorFeaturePresent LoadLibraryExW ExitProcess WideCharToMultiByte GetProcessHeap GetStdHandle GetStartupInfoW WriteFile GetEnvironmentStringsW FreeEnvironmentStringsW HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter IsValidCodePage GetACP GetOEMCP GetCPInfo GetStringTypeW RtlUnwind OutputDebugStringW

winmm

timeGetTime

advapi32

RegCloseKey RegOpenKeyExW RevertToSelf RegDisablePredefinedCache GetLengthSid OpenProcessToken ConvertStringSidToSidW SetTokenInformation ConvertSidToStringSidW LookupAccountNameW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-24_03747063f58ef9836d12c62b9c266fe4_elex_maze_rhadamanthys

kernel32

winmm

advapi32

generic