General
- Target 2026-07-11_6c040030aba4142d13fca972276b3aae_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- Sample260711-b7mgjsat3p
- SHA256 990b7cdfd4b06fd3475ce83fafcfd6bf08aa6152ffb62df4ceab3c87baed09e4
- MD5 6c040030aba4142d13fca972276b3aae
- SHA1 9ddf87e2c66d1a22a29b72f62051c26200fd9424
- SHA512 a62ede9310f05a047659449a008747da374b1a6a5dfe5f13a103fa43d272a59c55c2513b158e7e860c0ebe911c6307771f39fc440b4bc1aa8943f396c087ceaf
- SSDEEP 6144:Av9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RF8RA:Ag49H61RgsNtbAdZ
- TLSH T199A41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_6c040030aba4142d13fca972276b3aae_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_6c040030aba4142d13fca972276b3aae_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- SHA256 990b7cdfd4b06fd3475ce83fafcfd6bf08aa6152ffb62df4ceab3c87baed09e4
- MD5 6c040030aba4142d13fca972276b3aae
- SHA1 9ddf87e2c66d1a22a29b72f62051c26200fd9424
- SHA512 a62ede9310f05a047659449a008747da374b1a6a5dfe5f13a103fa43d272a59c55c2513b158e7e860c0ebe911c6307771f39fc440b4bc1aa8943f396c087ceaf
- SSDEEP 6144:Av9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RF8RA:Ag49H61RgsNtbAdZ
- TLSH T199A41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.