2026-11-01_863da91bb3f2e0b3723f8c7a7f869864_bkransomware_elex_karagany_maze_rhadamanthys

General

Target
2026-11-01_863da91bb3f2e0b3723f8c7a7f869864_bkransomware_elex_karagany_maze_rhadamanthys
Size 1.2MB
Sample261102-tfksrabt21
SHA256 c55fe76e48271a13b89500859c0e4c0c4e99313bb25d71ab0ddc65dc0e7c0938
MD5 863da91bb3f2e0b3723f8c7a7f869864
SHA1 a17934e40aaece63de3741f7ccf758e20adecb67
SHA512 fe1c5f25c113033ffdc86bcf3eba25104a82344a67ecf2390df6507e48d50391c2114ffc40bbe6d221f4303eaa3492fe77adab6d9bc05ebb94847d01fe84a345
SSDEEP 12288:01kjR7e7w4qPdGll/kuGIoD+AHQE0Z+MF1I2Sd:pjR7WpkdEroDfelF1B
TLSH
T12E5512037AD881B1D8A3063559E08731422BFD666E358547B344365EAE3E6E0CE7BB37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_863da91bb3f2e0b3723f8c7a7f869864_bkransomware_elex_karagany_maze_rhadamanthys

2026-11-01_863da91bb3f2e0b3723f8c7a7f869864_bkransomware_elex_karagany_maze_rhadamanthys

.exe 1.2MB

IMPHASH 32daa071258a25e3fea65c1433bc3227
SHA256 c55fe76e48271a13b89500859c0e4c0c4e99313bb25d71ab0ddc65dc0e7c0938
MD5 863da91bb3f2e0b3723f8c7a7f869864
SHA1 a17934e40aaece63de3741f7ccf758e20adecb67
SHA512 fe1c5f25c113033ffdc86bcf3eba25104a82344a67ecf2390df6507e48d50391c2114ffc40bbe6d221f4303eaa3492fe77adab6d9bc05ebb94847d01fe84a345
SSDEEP 12288:01kjR7e7w4qPdGll/kuGIoD+AHQE0Z+MF1I2Sd:pjR7WpkdEroDfelF1B
TLSH
T12E5512037AD881B1D8A3063559E08731422BFD666E358547B344365EAE3E6E0CE7BB37
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

4888

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\dropbox\tools\lsusb\Release\lsusb.pdb