General
- Target 2026-04-22_14cc28ce865264d4287db190fd9c8cf7_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- Sample260422-eby29agv8n
- SHA256 7ec71e2794fc6a2527e7f21ee76c06976301fc0276ec316bb942c3f893bf6d97
- MD5 14cc28ce865264d4287db190fd9c8cf7
- SHA1 445a12c77f0104da76fbdd5bea15f698d7ae83ef
- SHA512 80da841fd39b24f4d6e4fa1b90f405ec0490947e404d422e143a436dff1ff8738e366fb3bcfadca2b6d6325055d95777b149a232abac737aeb964708fda0b161
- SSDEEP 6144:9v9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFyRA:9g49H61RgsNtbAd3
- TLSH T11BA41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-22_14cc28ce865264d4287db190fd9c8cf7_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_14cc28ce865264d4287db190fd9c8cf7_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- SHA256 7ec71e2794fc6a2527e7f21ee76c06976301fc0276ec316bb942c3f893bf6d97
- MD5 14cc28ce865264d4287db190fd9c8cf7
- SHA1 445a12c77f0104da76fbdd5bea15f698d7ae83ef
- SHA512 80da841fd39b24f4d6e4fa1b90f405ec0490947e404d422e143a436dff1ff8738e366fb3bcfadca2b6d6325055d95777b149a232abac737aeb964708fda0b161
- SSDEEP 6144:9v9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFyRA:9g49H61RgsNtbAd3
- TLSH T11BA41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.