General
- Target 2026-04-13_01f08640c2b6bd7d684486368a20900c_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- Sample260413-1ay7hsf17r
- SHA256 1720ebab097fb89ed19dec588a52300c59a3e732a4c63bc97aedc4a0b34d4eeb
- MD5 01f08640c2b6bd7d684486368a20900c
- SHA1 2c4940d4861c59c4924ddc5dd50113115931d96c
- SHA512 dee75ff873b55b14d8636e14d89550da45f67399c9cb2d894677d98fbbe7dad8272d791d022ce9a8d8b76af7cdcad860e9cecb92af10ceb1886fec5c4b9494b1
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvvS:/uTs1gBpQL5kmh0671o1Cy
- TLSH T139841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-13_01f08640c2b6bd7d684486368a20900c_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-13_01f08640c2b6bd7d684486368a20900c_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-13_01f08640c2b6bd7d684486368a20900c_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- SHA256 1720ebab097fb89ed19dec588a52300c59a3e732a4c63bc97aedc4a0b34d4eeb
- MD5 01f08640c2b6bd7d684486368a20900c
- SHA1 2c4940d4861c59c4924ddc5dd50113115931d96c
- SHA512 dee75ff873b55b14d8636e14d89550da45f67399c9cb2d894677d98fbbe7dad8272d791d022ce9a8d8b76af7cdcad860e9cecb92af10ceb1886fec5c4b9494b1
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvvS:/uTs1gBpQL5kmh0671o1Cy
- TLSH T139841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Seven ransomware
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Adds Run key to start application