General
- Target 2026-07-08_cfac74c1042f8a78e510320aac723b5a_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- Sample260708-11cffaaw6y
- SHA256 36e5007bb11adfed333dcc40cd4c77f4747a810023ae40643f3697e294ac46af
- MD5 cfac74c1042f8a78e510320aac723b5a
- SHA1 fd027a79e4e536d93eba32aa55ff0a24de43dffa
- SHA512 e5018e5bcca1093b2be7ab3c30ff3aa57203a44d4c1846220915e6ac49bbe45533ac773bdba8905b6420ef5d68d66860a1693373387baa048fe287a40895e9cf
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvvI:/uTs1gBpQL5kmh0671o1Co
- TLSH T1FC841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-08_cfac74c1042f8a78e510320aac723b5a_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_cfac74c1042f8a78e510320aac723b5a_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_cfac74c1042f8a78e510320aac723b5a_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- SHA256 36e5007bb11adfed333dcc40cd4c77f4747a810023ae40643f3697e294ac46af
- MD5 cfac74c1042f8a78e510320aac723b5a
- SHA1 fd027a79e4e536d93eba32aa55ff0a24de43dffa
- SHA512 e5018e5bcca1093b2be7ab3c30ff3aa57203a44d4c1846220915e6ac49bbe45533ac773bdba8905b6420ef5d68d66860a1693373387baa048fe287a40895e9cf
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvvI:/uTs1gBpQL5kmh0671o1Co
- TLSH T1FC841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Seven ransomware
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Adds Run key to start application