2026-10-19_6fa58faa5bde882470feed7ee94fb905_elex_karagany_maze_rhadamanthys

General

Target
2026-10-19_6fa58faa5bde882470feed7ee94fb905_elex_karagany_maze_rhadamanthys
Size 699KB
Sample261020-vd57cacd73
SHA256 d854f200aa579c9540a2f8ba602c8bd3f770d1af2f7bcc0b2e2531cb3e3a6e31
MD5 6fa58faa5bde882470feed7ee94fb905
SHA1 63114f1c0fb55f15c8d3246e66692c164260e724
SHA512 7538c201aff6a71be2e7110b2aa0a273faa28a7c199551035972a3e4f79281532366c925e63432186a0e5e059414965af846d170b5740c0806b3a5180fb23667
SSDEEP 12288:/vJGnN+QOdxLKWbt+GRHrKyHdtLnS4mj/Lxp+YU59wpQGK7mbvT96MeJyy:iN1O3tRHrKCd5nSxj/FYYQoK7mbb9tYr
TLSH
T129E4E002B7F8122CF4F39735A879A7515679BC22DE358B6D1A8016AD1E30990EF21F73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-19_6fa58faa5bde882470feed7ee94fb905_elex_karagany_maze_rhadamanthys

File Explorer

2026-10-19_6fa58faa5bde882470feed7ee94fb905_elex_karagany_maze_rhadamanthys

.exe 699KB

2026-10-19_6fa58faa5bde882470feed7ee94fb905_elex_karagany_maze_rhadamanthys

IMPHASH 5ac686d0ae8f361e468614d603c99994
SHA256 d854f200aa579c9540a2f8ba602c8bd3f770d1af2f7bcc0b2e2531cb3e3a6e31
MD5 6fa58faa5bde882470feed7ee94fb905
SHA1 63114f1c0fb55f15c8d3246e66692c164260e724
SHA512 7538c201aff6a71be2e7110b2aa0a273faa28a7c199551035972a3e4f79281532366c925e63432186a0e5e059414965af846d170b5740c0806b3a5180fb23667
SSDEEP 12288:/vJGnN+QOdxLKWbt+GRHrKyHdtLnS4mj/Lxp+YU59wpQGK7mbvT96MeJyy:iN1O3tRHrKCd5nSxj/FYYQoK7mbb9tYr
TLSH
T129E4E002B7F8122CF4F39735A879A7515679BC22DE358B6D1A8016AD1E30990EF21F73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

31362

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

GoogleUpdate_unsigned.pdb

advapi32

RegOpenKeyExW

kernel32

GetCommandLineW HeapReAlloc FindResourceExW FindResourceW FreeLibrary LoadResource HeapAlloc LoadLibraryExW HeapFree GetProcessHeap InitializeCriticalSectionAndSpinCount SizeofResource HeapDestroy GetModuleFileNameW RaiseException GetLastError GetProcAddress HeapSize LockResource DecodePointer GetFileAttributesExW DeleteCriticalSection CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection EncodePointer IsProcessorFeaturePresent ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte SetLastError GetCurrentThreadId GetStdHandle GetFileType GetStartupInfoW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo RtlUnwind LCMapStringW CreateFileW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

PathRemoveFileSpecW PathAppendW SHQueryValueExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-19_6fa58faa5bde882470feed7ee94fb905_elex_karagany_maze_rhadamanthys

advapi32

kernel32

shell32

user32

shlwapi

generic