General
- Target 2026-11-01_ea93558134a5b648bafbd34602db8b26_bkransomware_elex_icedid_maze
- Size 2.3MB
- Sample261102-e54jtsey8s
- SHA256 1ae32d63212fe94952346a977c7a52d3b8af56c39e7235eda363843be21f5972
- MD5 ea93558134a5b648bafbd34602db8b26
- SHA1 61a2e214fcc49a12472aefc2cae7839ed51c0c3a
- SHA512 b5411ebcbde9dffdcb567d0834f8a12adfca98213c75e9ed36d003b0ffad32566152ed0645ced2654e507f85aafcb4b14a1bd575fe985e67c70a933cb458c98e
- SSDEEP 49152:oDD0FZs/Yl7dYUMQ+fCi6p6O8IFeII8uxV1XL4ThOlciSexvI:sD0FZs/U73MQ+fCi6AeeT8uxV1X48rSk
- TLSH T1A8B5BF33F590907AC93313315E9D636C76A9BB710F36428722E55F2D2EB05C36A396A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_ea93558134a5b648bafbd34602db8b26_bkransomware_elex_icedid_maze.exe
Resource
win10v2004-20260911-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_ea93558134a5b648bafbd34602db8b26_bkransomware_elex_icedid_maze
- Size 2.3MB
- SHA256 1ae32d63212fe94952346a977c7a52d3b8af56c39e7235eda363843be21f5972
- MD5 ea93558134a5b648bafbd34602db8b26
- SHA1 61a2e214fcc49a12472aefc2cae7839ed51c0c3a
- SHA512 b5411ebcbde9dffdcb567d0834f8a12adfca98213c75e9ed36d003b0ffad32566152ed0645ced2654e507f85aafcb4b14a1bd575fe985e67c70a933cb458c98e
- SSDEEP 49152:oDD0FZs/Yl7dYUMQ+fCi6p6O8IFeII8uxV1XL4ThOlciSexvI:sD0FZs/U73MQ+fCi6AeeT8uxV1X48rSk
- TLSH T1A8B5BF33F590907AC93313315E9D636C76A9BB710F36428722E55F2D2EB05C36A396A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1