General
- Target 2026-07-14_81be2ef8457a17b622d1ba89f5f677fd_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260714-d5182afx9w
- SHA256 293738639f96506e9c92996df48f9b6c6d93dbc73e8e940118ef05a89767933d
- MD5 81be2ef8457a17b622d1ba89f5f677fd
- SHA1 e16773859480c104755bb5bbea8bbc98d1291e90
- SHA512 634dbe5760007315c187376f42d4d0e1d937117fe77d83d35bbd6baa0b69b6c5e633320e4560aa2d538d039e09e7ce0636349ceed9f34943f124cf60f6bc121f
- SSDEEP 12288:bg49H6lHSmhFbAdsiYs4Tko/jGQ7wzuyBrIqOHzLC+eNDowlb8QyVo7SK51W:c49H6VNb8ijLGQ7t2OaBN0sW4T
- TLSH T1EC35BE02B7E9A034F1F31B31AF7592605A7ABCA29D35C60E23D41A1D4DB0990EA75F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_81be2ef8457a17b622d1ba89f5f677fd_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_81be2ef8457a17b622d1ba89f5f677fd_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_81be2ef8457a17b622d1ba89f5f677fd_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 293738639f96506e9c92996df48f9b6c6d93dbc73e8e940118ef05a89767933d
- MD5 81be2ef8457a17b622d1ba89f5f677fd
- SHA1 e16773859480c104755bb5bbea8bbc98d1291e90
- SHA512 634dbe5760007315c187376f42d4d0e1d937117fe77d83d35bbd6baa0b69b6c5e633320e4560aa2d538d039e09e7ce0636349ceed9f34943f124cf60f6bc121f
- SSDEEP 12288:bg49H6lHSmhFbAdsiYs4Tko/jGQ7wzuyBrIqOHzLC+eNDowlb8QyVo7SK51W:c49H6VNb8ijLGQ7t2OaBN0sW4T
- TLSH T1EC35BE02B7E9A034F1F31B31AF7592605A7ABCA29D35C60E23D41A1D4DB0990EA75F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1