General
- Target 2026-07-05_63ebd2132ee2789f77c62ccdda296333_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260705-byx7paf19v
- SHA256 18d894a2800ac187fe2fc13f88a643742f3f26c46b65dd01af2c33a51be957c7
- MD5 63ebd2132ee2789f77c62ccdda296333
- SHA1 b618d50db4566adc25f7aae9424b72cd94014e76
- SHA512 ae4d1e8ca00ebf02fabfe6cde1cab682327031a3fd6ed5f1d0b964294d876c08c9a2490e9b6efd28bdde9ef41a483efe186f4bd4b9f3c09a759705ad965c9d00
- SSDEEP 24576:c49H6qMRvMgKK1jczrUv3749Bm2yf8IP8ytjq4b0Ppmro:c4p6qMRvMgKK+zov+yEIP8v4b0/
- TLSH T11A35BF02B7F9A134F2F31B31AFB952554A7ABC629D35C60F2394160D1DB0A90EA75B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_63ebd2132ee2789f77c62ccdda296333_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_63ebd2132ee2789f77c62ccdda296333_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 18d894a2800ac187fe2fc13f88a643742f3f26c46b65dd01af2c33a51be957c7
- MD5 63ebd2132ee2789f77c62ccdda296333
- SHA1 b618d50db4566adc25f7aae9424b72cd94014e76
- SHA512 ae4d1e8ca00ebf02fabfe6cde1cab682327031a3fd6ed5f1d0b964294d876c08c9a2490e9b6efd28bdde9ef41a483efe186f4bd4b9f3c09a759705ad965c9d00
- SSDEEP 24576:c49H6qMRvMgKK1jczrUv3749Bm2yf8IP8ytjq4b0Ppmro:c4p6qMRvMgKK+zov+yEIP8v4b0/
- TLSH T11A35BF02B7F9A134F2F31B31AFB952554A7ABC629D35C60F2394160D1DB0A90EA75B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1