General
- Target 2026-04-03_cf6c3ed920bf8da096ef70e2ff59a137_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- Sample260403-dsakjsct9w
- SHA256 2991dcf2f6221e1a230fb499b42df02960df6e202a73cc1e6f4e1acb87a6e77a
- MD5 cf6c3ed920bf8da096ef70e2ff59a137
- SHA1 4fd0eac4badfd2315f684d72c19c8cec199e4ecd
- SHA512 1d8086583a100653c7c6105276033f2b84c714d39c7c94ec6e96e460f4a26861d0cadce1eb50ce77ecec99e1ce229bacb9a2c11f5b4514afd5f8524b592b6c92
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvvi:/uTs1gBpQL5kmh0671o1CC
- TLSH T108841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-03_cf6c3ed920bf8da096ef70e2ff59a137_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-03_cf6c3ed920bf8da096ef70e2ff59a137_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-03_cf6c3ed920bf8da096ef70e2ff59a137_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- SHA256 2991dcf2f6221e1a230fb499b42df02960df6e202a73cc1e6f4e1acb87a6e77a
- MD5 cf6c3ed920bf8da096ef70e2ff59a137
- SHA1 4fd0eac4badfd2315f684d72c19c8cec199e4ecd
- SHA512 1d8086583a100653c7c6105276033f2b84c714d39c7c94ec6e96e460f4a26861d0cadce1eb50ce77ecec99e1ce229bacb9a2c11f5b4514afd5f8524b592b6c92
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvvi:/uTs1gBpQL5kmh0671o1CC
- TLSH T108841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Seven ransomware
-
Seven family
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Adds Run key to start application