2026-10-01_fa70bfd89c15fdd9068c6df054f49ee1_elex_magniber_maze_rhadamanthys

General

Target
2026-10-01_fa70bfd89c15fdd9068c6df054f49ee1_elex_magniber_maze_rhadamanthys
Size 1.4MB
Sample261003-w4babsvbph
SHA256 4950a64e3e4a30129c470f9201fe797d9b62df39ceb5f136823dd032de990d1c
MD5 fa70bfd89c15fdd9068c6df054f49ee1
SHA1 dc46019f6712db6f6bd5bacad65c526e7d04efa7
SHA512 51572107b5af2c6cb94dcce7b7393ff317c2a15169a182bc578bc11ff5ff4eab4565e313c402a3ce5208c9c61b0aec80b8946a028ef32c9bc78a7217002e4b2c
SSDEEP 24576:JaQI/r2wA0TqK3ChwF1+1OyhOeKjO0oAJfrNqMcrX/ZMrZr6HAW7nQMG:Jal/rA0TqKFF1+1rhThAJfBql/ZtB7Qn
TLSH
T137652322774181BAE957027448F2F76D59ADFE524B308DC3B7C81B1E0EA15C26A3B367
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-10-01_fa70bfd89c15fdd9068c6df054f49ee1_elex_magniber_maze_rhadamanthys

File Explorer

2026-10-01_fa70bfd89c15fdd9068c6df054f49ee1_elex_magniber_maze_rhadamanthys

.exe 1.4MB

2026-10-01_fa70bfd89c15fdd9068c6df054f49ee1_elex_magniber_maze_rhadamanthys

IMPHASH 1848ca61a160f5aad02d3f796d279aa6
SHA256 4950a64e3e4a30129c470f9201fe797d9b62df39ceb5f136823dd032de990d1c
MD5 fa70bfd89c15fdd9068c6df054f49ee1
SHA1 dc46019f6712db6f6bd5bacad65c526e7d04efa7
SHA512 51572107b5af2c6cb94dcce7b7393ff317c2a15169a182bc578bc11ff5ff4eab4565e313c402a3ce5208c9c61b0aec80b8946a028ef32c9bc78a7217002e4b2c
SSDEEP 24576:JaQI/r2wA0TqK3ChwF1+1OyhOeKjO0oAJfrNqMcrX/ZMrZr6HAW7nQMG:Jal/rA0TqKFF1+1rhThAJfBql/ZtB7Qn
TLSH
T137652322774181BAE957027448F2F76D59ADFE524B308DC3B7C81B1E0EA15C26A3B367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

4f:6a:b0:8c:8c:a9:60:a8:2d:b1:3d:0a:32:3c:fd:87:52:0b:3a:7b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=ARRONTECH SOFTWARE LIMITED,O=ARRONTECH SOFTWARE LIMITED,L=Wan Chai,ST=Hong Kong,C=HK

Chains

Oct 2, 2026

CN=ARRONTECH SOFTWARE LIMITED,O=ARRONTECH SOFTWARE LIMITED,L=Wan Chai,ST=Hong Kong,C=HK

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Minor OS version

1

Major OS version

5

Entry point

63463

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\BugSec\BugSec Packer\Release\Template.pdb

kernel32

FreeResource FindResourceW LoadResource CreateProcessW WaitForSingleObject SizeofResource GetTempPathW LockResource DeleteFileW ReadConsoleW ReadFile EncodePointer DecodePointer GetSystemTimeAsFileTime GetCommandLineA RaiseException RtlUnwind HeapAlloc GetLastError HeapFree IsDebuggerPresent IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar WideCharToMultiByte HeapSize SetLastError GetCurrentThreadId WriteFile GetConsoleCP GetConsoleMode CloseHandle GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameA GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW HeapReAlloc CreateFileW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo LCMapStringW SetFilePointerEx SetStdHandle WriteConsoleW FlushFileBuffers OutputDebugStringW SetEndOfFile GetStringTypeW

user32

MessageBoxW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-01_fa70bfd89c15fdd9068c6df054f49ee1_elex_magniber_maze_rhadamanthys

PE Signature issue

kernel32

user32

generic