General
- Target 2026-07-09_258a576e2c9830972abb0aad4f0ed99f_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260709-m2a24sh19w
- SHA256 fee4c9149016940b262a683dbbc91dc198834c457c216b0425b2213e4eefb17a
- MD5 258a576e2c9830972abb0aad4f0ed99f
- SHA1 af4ec68e102df95e22debc588dd4b175d1485ed1
- SHA512 bbdaf25a1a132f63593fcb853309f118851f603ea68cae90480fe9ba2592083a7eb6f09c325710257c0cadc6e9b2561c7603af61b4fe415e8eee72fd03877d79
- SSDEEP 24576:c49H6zbS0X65t29bxf49LXlbyw0anPtbKHgJ:c4p6zbSr5wZ49LVbyNanlb8gJ
- TLSH T1D535CF12B7F99134F2F31B31AFB592655ABABC629D35C60E23C41A0D0D70990EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_258a576e2c9830972abb0aad4f0ed99f_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_258a576e2c9830972abb0aad4f0ed99f_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 fee4c9149016940b262a683dbbc91dc198834c457c216b0425b2213e4eefb17a
- MD5 258a576e2c9830972abb0aad4f0ed99f
- SHA1 af4ec68e102df95e22debc588dd4b175d1485ed1
- SHA512 bbdaf25a1a132f63593fcb853309f118851f603ea68cae90480fe9ba2592083a7eb6f09c325710257c0cadc6e9b2561c7603af61b4fe415e8eee72fd03877d79
- SSDEEP 24576:c49H6zbS0X65t29bxf49LXlbyw0anPtbKHgJ:c4p6zbSr5wZ49LVbyNanlb8gJ
- TLSH T1D535CF12B7F99134F2F31B31AFB592655ABABC629D35C60E23C41A0D0D70990EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1