General
- Target 2026-07-01_102dc92071a21bc5523dead4c10a187b_bkransomware_elex_hawkeye_maze_remcos
- Size 469KB
- Sample260701-cbf6bscs9l
- SHA256 f651b80727f0effd68a25b294e4c4dc03c40788837d5ccd24bf1aa3d3fa14602
- MD5 102dc92071a21bc5523dead4c10a187b
- SHA1 0c1a45b184416262c965e1d2ed10833ac7a74b7f
- SHA512 2193004f03f0ddcdd3568489bbe2a6c3a16096116e87a3efbf55831d39f358ecb3ad8273fbe4d4bdc171474fcfb7291c6eef4253a0b6db851c07887ba8a88585
- SSDEEP 6144:DoyZmTAsfJFakxaLjcMkc0Cax1P8Gp6bYA0w601+dNT9/0626ASkVOAFJ4:DoyIJsMPrP5p6bYboEdNM
- TLSH T13BA4190277E89135F2F31B31AEB992615A7ABC719D35D20F23D41A0D0DB0A90EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_102dc92071a21bc5523dead4c10a187b_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_102dc92071a21bc5523dead4c10a187b_bkransomware_elex_hawkeye_maze_remcos
- Size 469KB
- SHA256 f651b80727f0effd68a25b294e4c4dc03c40788837d5ccd24bf1aa3d3fa14602
- MD5 102dc92071a21bc5523dead4c10a187b
- SHA1 0c1a45b184416262c965e1d2ed10833ac7a74b7f
- SHA512 2193004f03f0ddcdd3568489bbe2a6c3a16096116e87a3efbf55831d39f358ecb3ad8273fbe4d4bdc171474fcfb7291c6eef4253a0b6db851c07887ba8a88585
- SSDEEP 6144:DoyZmTAsfJFakxaLjcMkc0Cax1P8Gp6bYA0w601+dNT9/0626ASkVOAFJ4:DoyIJsMPrP5p6bYboEdNM
- TLSH T13BA4190277E89135F2F31B31AEB992615A7ABC719D35D20F23D41A0D0DB0A90EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.