General
- Target 2026-07-06_1a70ca35b4f302434b6fc322d8dd0563_agent-tesla_elex_hawkeye_maze_remcos
- Size 1.4MB
- Sample260707-frm6csft6q
- SHA256 4e310396b9a6484801121ad9f6247129c169e69c2a33fd21ce3d77ecd1ac1c58
- MD5 1a70ca35b4f302434b6fc322d8dd0563
- SHA1 454681a2f156c2cd1212754a488381c12ea08c86
- SHA512 4332d3fa41320b6c7f12aeee206ff8e2a210d808cd65efa7b52bd52bcf89677cfe80110d67d15be6df2f20b466efa4de0f09d9734a1491752d14ed9d04dad971
- SSDEEP 12288:iJV3REMlnCG22lhtjVoAYxQl+u13a/sVyaVeK56ORMkkOlPlNKlga4Umff2lRT:i3hEQ3hlVodGl+gUKrMkzXa4P6RT
- TLSH T18865AE22B3DD9360CB6A9173BF29B3016EBF78650630B95B2F980D7DA950171232D763
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_1a70ca35b4f302434b6fc322d8dd0563_agent-tesla_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_1a70ca35b4f302434b6fc322d8dd0563_agent-tesla_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_1a70ca35b4f302434b6fc322d8dd0563_agent-tesla_elex_hawkeye_maze_remcos
- Size 1.4MB
- SHA256 4e310396b9a6484801121ad9f6247129c169e69c2a33fd21ce3d77ecd1ac1c58
- MD5 1a70ca35b4f302434b6fc322d8dd0563
- SHA1 454681a2f156c2cd1212754a488381c12ea08c86
- SHA512 4332d3fa41320b6c7f12aeee206ff8e2a210d808cd65efa7b52bd52bcf89677cfe80110d67d15be6df2f20b466efa4de0f09d9734a1491752d14ed9d04dad971
- SSDEEP 12288:iJV3REMlnCG22lhtjVoAYxQl+u13a/sVyaVeK56ORMkkOlPlNKlga4Umff2lRT:i3hEQ3hlVodGl+gUKrMkzXa4P6RT
- TLSH T18865AE22B3DD9360CB6A9173BF29B3016EBF78650630B95B2F980D7DA950171232D763
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.