General
- Target 2026-05-11_ba0b49e91816bac8205c7479b0e8694a_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- Sample260511-vbf5faez9x
- SHA256 c2de03ee483a78777e69e8b9ef2fe88a80d6142178b558c7ce164d04990a39f8
- MD5 ba0b49e91816bac8205c7479b0e8694a
- SHA1 a6f81e8418faee2bcc59dd3d1597a49d7e00cefb
- SHA512 75995d0048d52f22e33a57531c6e6a693b7b6ae99a7ee4ba81183e6c7b0171d42a111c2a8914b478abcf3cd700229000d2ab8b72eb5d383c43220859327f713b
- SSDEEP 6144:Pv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFbRA:Pg49H61RgsNtbAde
- TLSH T145A41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_ba0b49e91816bac8205c7479b0e8694a_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_ba0b49e91816bac8205c7479b0e8694a_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- SHA256 c2de03ee483a78777e69e8b9ef2fe88a80d6142178b558c7ce164d04990a39f8
- MD5 ba0b49e91816bac8205c7479b0e8694a
- SHA1 a6f81e8418faee2bcc59dd3d1597a49d7e00cefb
- SHA512 75995d0048d52f22e33a57531c6e6a693b7b6ae99a7ee4ba81183e6c7b0171d42a111c2a8914b478abcf3cd700229000d2ab8b72eb5d383c43220859327f713b
- SSDEEP 6144:Pv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFbRA:Pg49H61RgsNtbAde
- TLSH T145A41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.