2026-10-01_3645f0b60acb7836063947e473f0fbb3_bkransomware_elex_maze

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-01_3645f0b60acb7836063947e473f0fbb3_bkransomware_elex_maze
Size 416KB
Sample261002-varjsaz13r
SHA256 e41082e6b5d658c9efe406b90db003c92eeb109700bf83a5127d285125ac1a17
MD5 3645f0b60acb7836063947e473f0fbb3
SHA1 7b4ad5d4d7ec185f225b4ce11bc32c5eb8534e75
SHA512 236c49c778a87c49d259c1937c4506053a92b746365cbd2cfa7f0cdbd77352898b021707781765c974427872691c189a15e6b395d7d3f06703c9dd136bcf9d00
SSDEEP 12288:NYLMa/O8bJJxrTIYEEVWOiPzH0g2f2lt9:NYQa/PT4M8GSt
TLSH
T1A094D011FA89C171E8F3013199FE9B69457D79390724A8CBF3886A6D38321D32B36797
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-01_3645f0b60acb7836063947e473f0fbb3_bkransomware_elex_maze

File Explorer

2026-10-01_3645f0b60acb7836063947e473f0fbb3_bkransomware_elex_maze

.exe 416KB

2026-10-01_3645f0b60acb7836063947e473f0fbb3_bkransomware_elex_maze

IMPHASH cdbaf7e15b132b84fba5d7ca3c91e244
SHA256 e41082e6b5d658c9efe406b90db003c92eeb109700bf83a5127d285125ac1a17
MD5 3645f0b60acb7836063947e473f0fbb3
SHA1 7b4ad5d4d7ec185f225b4ce11bc32c5eb8534e75
SHA512 236c49c778a87c49d259c1937c4506053a92b746365cbd2cfa7f0cdbd77352898b021707781765c974427872691c189a15e6b395d7d3f06703c9dd136bcf9d00
SSDEEP 12288:NYLMa/O8bJJxrTIYEEVWOiPzH0g2f2lt9:NYQa/PT4M8GSt
TLSH
T1A094D011FA89C171E8F3013199FE9B69457D79390724A8CBF3886A6D38321D32B36797
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

150343

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_ISOLATION IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_NO_BIND IMAGE_DLLCHARACTERISTICS_APPCONTAINER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathRemoveFileSpecW PathAppendW PathFileExistsW

shell32

SHFileOperationW ShellExecuteExW SHGetFolderPathW

crypt32

CryptBinaryToStringA

advapi32

RegCreateKeyA CreateProcessWithLogonW ImpersonateLoggedOnUser AllocateAndInitializeSid DuplicateTokenEx GetTokenInformation OpenProcessToken ConvertSidToStringSidW LookupAccountNameW GetSecurityInfo CryptGetHashParam CryptHashData CryptCreateHash CryptAcquireContextW RegOpenKeyW RegQueryValueW GetCurrentHwProfileW RegCloseKey RegSetValueExA RegQueryValueExA RegOpenKeyA

kernel32

SetUnhandledExceptionFilter FreeEnvironmentStringsW WriteConsoleW GetStringTypeW SetEnvironmentVariableA UnhandledExceptionFilter GetEnvironmentStringsW InitializeCriticalSectionAndSpinCount GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree lstrlenW CloseHandle GetLastError CreateMutexW GetTickCount GetVolumeInformationW ExitProcess VirtualAlloc SizeofResource LockResource LoadResource FindResourceW GetModuleHandleW VirtualFree DeleteFileW lstrcatA lstrcmpiA CreateThread CreateEventW FlushFileBuffers WriteFile CreateFileW CreateDirectoryW lstrlenA lstrcatW SystemTimeToFileTime GetSystemTime WaitForSingleObject SetEvent Sleep lstrcpyW ReadFile GetFileSize lstrcmpA SetFilePointerEx GetFileSizeEx GetFileType GetFileTime LocalFree MultiByteToWideChar MoveFileExW GetSystemDirectoryW GetComputerNameW OpenProcess GetExitCodeProcess TerminateProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW VerSetConditionMask VerifyVersionInfoW GetCurrentProcessId LCMapStringW CompareStringW OutputDebugStringW LoadLibraryExW GetCPInfo GetOEMCP GetACP IsValidCodePage GetConsoleMode GetConsoleCP LeaveCriticalSection EnterCriticalSection SetStdHandle HeapSize GetCommandLineW HeapFree HeapAlloc HeapReAlloc GetSystemTimeAsFileTime IsDebuggerPresent IsProcessorFeaturePresent EncodePointer DecodePointer GetProcAddress RaiseException RtlUnwind SetLastError GetCurrentThreadId GetModuleHandleExW WideCharToMultiByte GetProcessHeap GetStdHandle DeleteCriticalSection GetStartupInfoW GetModuleFileNameW QueryPerformanceCounter GetTimeZoneInformation

user32

EnumWindows wsprintfW GetWindowTextW FindWindowW FindWindowExW EnumChildWindows GetClientRect PostMessageW SendMessageW wsprintfA

ntdll

_stricmp memchr toupper _snwprintf wcspbrk _wcsicmp wcsstr ZwSetInformationToken ZwFilterToken memmove _allshl

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-01_3645f0b60acb7836063947e473f0fbb3_bkransomware_elex_maze

shlwapi

shell32

crypt32

advapi32

kernel32

user32

ntdll

generic