General
- Target 2026-07-01_93e13087f78679e96ab037228ec030cf_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- Sample260701-kwcmmsct3w
- SHA256 148f32c078aa10adba2fa848287f0d152e82dc58d798426a5cababfe416ebde1
- MD5 93e13087f78679e96ab037228ec030cf
- SHA1 d8ad36290dc9c2ac1d02a310615f9cbc514bb232
- SHA512 a67c8d1afe9682c4cce7f7f45fa4f665ad5e2f2794b8a1f0fd0341967adef0d3a1ddaa9ef7fc2e457acc9578590bcd96939db367550c6ecbe76f5c4f74494901
- SSDEEP 6144:iv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RF5RA:ig49H61RgsNtbAdU
- TLSH T1E8A40902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_93e13087f78679e96ab037228ec030cf_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_93e13087f78679e96ab037228ec030cf_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- SHA256 148f32c078aa10adba2fa848287f0d152e82dc58d798426a5cababfe416ebde1
- MD5 93e13087f78679e96ab037228ec030cf
- SHA1 d8ad36290dc9c2ac1d02a310615f9cbc514bb232
- SHA512 a67c8d1afe9682c4cce7f7f45fa4f665ad5e2f2794b8a1f0fd0341967adef0d3a1ddaa9ef7fc2e457acc9578590bcd96939db367550c6ecbe76f5c4f74494901
- SSDEEP 6144:iv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RF5RA:ig49H61RgsNtbAdU
- TLSH T1E8A40902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.