General
- Target 2026-07-05_594de5e990d698b1d0512ae4dffd581e_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260705-b1dk3abz4p
- SHA256 4032f52447d016c5fc4b8d99206aa6436e33416eebced2467ddae917df7294f0
- MD5 594de5e990d698b1d0512ae4dffd581e
- SHA1 404b4a6da7244dd2e8601cd223257688b9060ffc
- SHA512 a7c9d4a409f8c551e81425fc0be95cd210145657fa893c2405bca26220a0ecb6153bc565a9fb7733d36ba5759efe4e8c11e9e7768fd58a66addb9dc38ff456ce
- SSDEEP 12288:bg49H6CBJgNY+AdnoNCYpumRPeTLvDLRxv9VbNcOOAake0EcQjjEFjc1y:c49H6eP+PTpqHvDLLv9VbNNDQUFjc1y
- TLSH T14D35BF02B7E9A034F6F31B31AF7952659A7ABC729D35C60F2384190D0DB0990EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_594de5e990d698b1d0512ae4dffd581e_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_594de5e990d698b1d0512ae4dffd581e_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 4032f52447d016c5fc4b8d99206aa6436e33416eebced2467ddae917df7294f0
- MD5 594de5e990d698b1d0512ae4dffd581e
- SHA1 404b4a6da7244dd2e8601cd223257688b9060ffc
- SHA512 a7c9d4a409f8c551e81425fc0be95cd210145657fa893c2405bca26220a0ecb6153bc565a9fb7733d36ba5759efe4e8c11e9e7768fd58a66addb9dc38ff456ce
- SSDEEP 12288:bg49H6CBJgNY+AdnoNCYpumRPeTLvDLRxv9VbNcOOAake0EcQjjEFjc1y:c49H6eP+PTpqHvDLLv9VbNNDQUFjc1y
- TLSH T14D35BF02B7E9A034F6F31B31AF7952659A7ABC729D35C60F2384190D0DB0990EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1