2026-07-08_e3f539a1b48ffc8d333299746e487bb7_elex_hawkeye_maze_stealc

General

Target
2026-07-08_e3f539a1b48ffc8d333299746e487bb7_elex_hawkeye_maze_stealc
Size 421KB
Sample260708-envklaav2y
SHA256 9a1a1919b361d46c0d4fb8967ae9674816c62dad8d0f1cbeec3583beff8056ad
MD5 e3f539a1b48ffc8d333299746e487bb7
SHA1 db2da9968d5f69840e9acf84d3283ed70f06d79c
SHA512 86d947e1fea3d602e605c0a7ce3929004a6508f9fc1a3c6d58dae4c210943b57b1c2cc06a62af0c43ba20839ec40b45a69849368af474574a2c38c4b14a5d776
SSDEEP 6144:c3fQ59EJKeS8F7gWWwkCv1CpVoYA1RKhX9FBrQR/NSYDnSJfZ:i/7gWFkCv1Cpe3RKhNnVYDSJfZ
TLSH
T1C1944A0274D3D03AD4B341F6C5ADA32206B8BE60337559D7BFD80A8D5BA84D0BA7625F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_e3f539a1b48ffc8d333299746e487bb7_elex_hawkeye_maze_stealc

File Explorer

2026-07-08_e3f539a1b48ffc8d333299746e487bb7_elex_hawkeye_maze_stealc

.exe 421KB

2026-07-08_e3f539a1b48ffc8d333299746e487bb7_elex_hawkeye_maze_stealc

IMPHASH 0766f11ac9fb2b35dec02aa0639d9b13
SHA256 9a1a1919b361d46c0d4fb8967ae9674816c62dad8d0f1cbeec3583beff8056ad
MD5 e3f539a1b48ffc8d333299746e487bb7
SHA1 db2da9968d5f69840e9acf84d3283ed70f06d79c
SHA512 86d947e1fea3d602e605c0a7ce3929004a6508f9fc1a3c6d58dae4c210943b57b1c2cc06a62af0c43ba20839ec40b45a69849368af474574a2c38c4b14a5d776
SSDEEP 6144:c3fQ59EJKeS8F7gWWwkCv1CpVoYA1RKhX9FBrQR/NSYDnSJfZ:i/7gWFkCv1Cpe3RKhNnVYDSJfZ
TLSH
T1C1944A0274D3D03AD4B341F6C5ADA32206B8BE60337559D7BFD80A8D5BA84D0BA7625F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

184292

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA GetProcAddress EncodePointer DecodePointer GetLastError ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte HeapFree HeapAlloc GetSystemTimeAsFileTime GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent HeapSize IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection FatalAppExitA UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount CreateEventW Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetTickCount GetModuleHandleW CreateSemaphoreW GetStdHandle WriteFile GetModuleFileNameW SetConsoleCtrlHandler FreeLibrary LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThread GetCurrentThreadId GetProcessHeap FindClose FindFirstFileExW GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc OutputDebugStringW GetStringTypeW FileTimeToLocalFileTime GetFileInformationByHandle PeekNamedPipe GetFullPathNameW SetCurrentDirectoryW GetCurrentDirectoryW CreateFileW SetStdHandle SetFilePointerEx WriteConsoleW GetTimeZoneInformation SetEndOfFile ReadFile ReadConsoleW GetFullPathNameA SetEnvironmentVariableA

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_e3f539a1b48ffc8d333299746e487bb7_elex_hawkeye_maze_stealc

kernel32

generic