General
- Target 2026-06-30_93f1c8dbd1e354a8d40ebf68be009a86_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- Sample260630-zbkvvag16w
- SHA256 dbd767c787edd9e6e9270fad1b9b239eb3e2787dc61b868de17dd67e480d6c7d
- MD5 93f1c8dbd1e354a8d40ebf68be009a86
- SHA1 95ba3b26ba8ffad65ef5ab1743483c26a196243d
- SHA512 632b20dcccacbe3020db0cc546e08d96bfcc7c3c66dad3fd63f84f9bd5a8924e053c795e53f3e99c049f4ee3c984b30a16b7c30fb5e3d5bc7155babf968ea2da
- SSDEEP 6144:Yv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFhRA:Yg49H61RgsNtbAds
- TLSH T13DA41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_93f1c8dbd1e354a8d40ebf68be009a86_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_93f1c8dbd1e354a8d40ebf68be009a86_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- SHA256 dbd767c787edd9e6e9270fad1b9b239eb3e2787dc61b868de17dd67e480d6c7d
- MD5 93f1c8dbd1e354a8d40ebf68be009a86
- SHA1 95ba3b26ba8ffad65ef5ab1743483c26a196243d
- SHA512 632b20dcccacbe3020db0cc546e08d96bfcc7c3c66dad3fd63f84f9bd5a8924e053c795e53f3e99c049f4ee3c984b30a16b7c30fb5e3d5bc7155babf968ea2da
- SSDEEP 6144:Yv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFhRA:Yg49H61RgsNtbAds
- TLSH T13DA41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.