2026-10-11_82b1d961ad4aa74cc80783261de10934_bkransomware_elex_maze_stealc

General

Target
2026-10-11_82b1d961ad4aa74cc80783261de10934_bkransomware_elex_maze_stealc
Size 622KB
Sample261012-vx4smaytht
SHA256 61618f46c865cae9e373996f7d98f81595464dd3cec71bd67367cc381d2ca02f
MD5 82b1d961ad4aa74cc80783261de10934
SHA1 d6fda9be7c73b5cc507db01f43c7a7c4fcf934cb
SHA512 6f3c92be907a87037f069ea1d9e4d1ccf0f927422d9f98eea00336f5fea1c70e263c0c50fda138cd609de8d4c866c73345c306ed7f6eabcf6238b8fc082da2a7
SSDEEP 12288:gXc2sXxvYMY2BPIONYfk6TCF2vrOGt5tq5RzWMSt5gXg:gXcdZYM/lTYf8KrJq5e/gw
TLSH
T147D49D11B643A1B3D42325B74159F73A1A2DBE7A0F298AE3EBC30E6559F31C09633653
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-11_82b1d961ad4aa74cc80783261de10934_bkransomware_elex_maze_stealc

File Explorer

2026-10-11_82b1d961ad4aa74cc80783261de10934_bkransomware_elex_maze_stealc

.exe 622KB

2026-10-11_82b1d961ad4aa74cc80783261de10934_bkransomware_elex_maze_stealc

IMPHASH 81f17d9574d4b13233cbad5f83b946ed
SHA256 61618f46c865cae9e373996f7d98f81595464dd3cec71bd67367cc381d2ca02f
MD5 82b1d961ad4aa74cc80783261de10934
SHA1 d6fda9be7c73b5cc507db01f43c7a7c4fcf934cb
SHA512 6f3c92be907a87037f069ea1d9e4d1ccf0f927422d9f98eea00336f5fea1c70e263c0c50fda138cd609de8d4c866c73345c306ed7f6eabcf6238b8fc082da2a7
SSDEEP 12288:gXc2sXxvYMY2BPIONYfk6TCF2vrOGt5tq5RzWMSt5gXg:gXcdZYM/lTYf8KrJq5e/gw
TLSH
T147D49D11B643A1B3D42325B74159F73A1A2DBE7A0F298AE3EBC30E6559F31C09633653
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

375143

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA GetProcAddress GetLastError HeapFree HeapAlloc EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetSystemTimeAsFileTime HeapReAlloc GetLocalTime CloseHandle DuplicateHandle GetCurrentProcess CreateProcessW GetFullPathNameW GetTempPathW SetErrorMode CreateProcessA GetCommandLineA IsProcessorFeaturePresent GetProcessHeap GetStdHandle WriteFile GetModuleFileNameW IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection FatalAppExitA UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount CreateEventW Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetTickCount GetModuleHandleW CreateSemaphoreW SetConsoleCtrlHandler FreeLibrary LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo FindClose FindFirstFileExW GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime RtlUnwind GetCurrentThread GetCurrentThreadId GetConsoleCP GetConsoleMode CreatePipe GetFileAttributesExW GetFileType GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW RaiseException GetCurrentProcessId DeleteFileW WaitForSingleObject GetExitCodeProcess SetStdHandle ReadFile SetEnvironmentVariableA SetEnvironmentVariableW GetTimeZoneInformation GetModuleFileNameA QueryPerformanceCounter OutputDebugStringW HeapSize GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FileTimeToLocalFileTime GetFileInformationByHandle PeekNamedPipe SetCurrentDirectoryW GetCurrentDirectoryW CreateFileW SetFilePointerEx WriteConsoleW FlushFileBuffers ReadConsoleW GetFullPathNameA SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-11_82b1d961ad4aa74cc80783261de10934_bkransomware_elex_maze_stealc

kernel32

generic