General
- Target 2026-07-14_b876c6614f61f69f6731ad0831cdaa12_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260714-dph3hsft5t
- SHA256 88efee82ea724184fe6291fa829385dc238418fe3e56fb7cfdbfaa60209a3241
- MD5 b876c6614f61f69f6731ad0831cdaa12
- SHA1 c41afcbd72370505bc192868517f52961d06e1a7
- SHA512 0d2e9d55cd11a73cb1567b67e9f027084e361e914583b4817e683b23a2e687e6d540058366e5e83b43f67639828f94d8b3c67b0bc6533613e4aaa2bd7a21f929
- SSDEEP 12288:bg49H6JctsN1tAdYVsACbFWm5gToGzUCsHQJk5G/CnaYR0ix/m/wUdyqC:c49H6uGtbLCbFWm5SdaG/CaYGGgnJC
- TLSH T14E35BE02B7F9A134F2F31B31AFB552655A7BBC629D35C60F2384160D49B0A90EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_b876c6614f61f69f6731ad0831cdaa12_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_b876c6614f61f69f6731ad0831cdaa12_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_b876c6614f61f69f6731ad0831cdaa12_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 88efee82ea724184fe6291fa829385dc238418fe3e56fb7cfdbfaa60209a3241
- MD5 b876c6614f61f69f6731ad0831cdaa12
- SHA1 c41afcbd72370505bc192868517f52961d06e1a7
- SHA512 0d2e9d55cd11a73cb1567b67e9f027084e361e914583b4817e683b23a2e687e6d540058366e5e83b43f67639828f94d8b3c67b0bc6533613e4aaa2bd7a21f929
- SSDEEP 12288:bg49H6JctsN1tAdYVsACbFWm5gToGzUCsHQJk5G/CnaYR0ix/m/wUdyqC:c49H6uGtbLCbFWm5SdaG/CaYGGgnJC
- TLSH T14E35BE02B7F9A134F2F31B31AFB552655A7BBC629D35C60F2384160D49B0A90EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1