General
- Target 2026-07-12_638cfec58fcd3f4dec06b419c11f4088_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260712-p8d4fscs51
- SHA256 558707419da09e8a4c68218fcf975e9eeed35bd962bdf860555431208d512b50
- MD5 638cfec58fcd3f4dec06b419c11f4088
- SHA1 49b28e7d809ae6bb99bdcdd771162c87c0b7d534
- SHA512 cd63b65eb2769939f91d6b87cb719737d6234de577ae9bd74ce25348c71b7b686c25f067048f09be70cf9debff7df017300a7dfc8e07f873aa6207885d6ddda3
- SSDEEP 24576:c49H6PM3hAR58811ZxAOvHPTlYiz51M3XsU:c4p6PM3KR5vZiOvP2ma8
- TLSH T1DE35BF12B7F99134F2F31B31AF7592655A7ABC729D35C60E23D41A0D09B0A80EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_638cfec58fcd3f4dec06b419c11f4088_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_638cfec58fcd3f4dec06b419c11f4088_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_638cfec58fcd3f4dec06b419c11f4088_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 558707419da09e8a4c68218fcf975e9eeed35bd962bdf860555431208d512b50
- MD5 638cfec58fcd3f4dec06b419c11f4088
- SHA1 49b28e7d809ae6bb99bdcdd771162c87c0b7d534
- SHA512 cd63b65eb2769939f91d6b87cb719737d6234de577ae9bd74ce25348c71b7b686c25f067048f09be70cf9debff7df017300a7dfc8e07f873aa6207885d6ddda3
- SSDEEP 24576:c49H6PM3hAR58811ZxAOvHPTlYiz51M3XsU:c4p6PM3KR5vZiOvP2ma8
- TLSH T1DE35BF12B7F99134F2F31B31AF7592655A7ABC729D35C60E23D41A0D09B0A80EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1