General
- Target 2026-07-12_323167f685cbf291169bc3abcfc60d94_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260712-q24afac12s
- SHA256 93d2f2939a74d2f0705a18f721b07b5cc13f3b8b9d4f3aa4e518acc5569881b9
- MD5 323167f685cbf291169bc3abcfc60d94
- SHA1 6de10fe81bee8fee788a67d61a437837110f01aa
- SHA512 2aa1f20abe8b9abb2cc85392af75321e2ff4d2283ae536bee85a5e28dc3b271c8fbd7ab9b25cf19e2304432f93a405b76618e9ccfa269258f07ef55240bbef36
- SSDEEP 24576:649H6L9+Vp8SXdo8ke5i5Xh6wnBLTHTAcZQ/:64p6L9+VWS1SZBnHTAsi
- TLSH T11C35BF02B7E99134F2F31B31AF7891559ABBBD629D35C60E23C41A0D1DB0980EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_323167f685cbf291169bc3abcfc60d94_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_323167f685cbf291169bc3abcfc60d94_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_323167f685cbf291169bc3abcfc60d94_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 93d2f2939a74d2f0705a18f721b07b5cc13f3b8b9d4f3aa4e518acc5569881b9
- MD5 323167f685cbf291169bc3abcfc60d94
- SHA1 6de10fe81bee8fee788a67d61a437837110f01aa
- SHA512 2aa1f20abe8b9abb2cc85392af75321e2ff4d2283ae536bee85a5e28dc3b271c8fbd7ab9b25cf19e2304432f93a405b76618e9ccfa269258f07ef55240bbef36
- SSDEEP 24576:649H6L9+Vp8SXdo8ke5i5Xh6wnBLTHTAcZQ/:64p6L9+VWS1SZBnHTAsi
- TLSH T11C35BF02B7E99134F2F31B31AF7891559ABBBD629D35C60E23C41A0D1DB0980EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1