General
- Target 2026-07-14_b86b5ce6130fa60194b4a4426f86e721_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260714-dpkaksft5v
- SHA256 c1c01643b5801e4c5a5d84b4fd738577f8c249030fd1152798f223016a528a3f
- MD5 b86b5ce6130fa60194b4a4426f86e721
- SHA1 5d53e9d7e905b8b0fba3ef9e289cd11fb776a613
- SHA512 7f59201c15efb542341ce87cd7b7677956e485798cab9d29ad1796a958c567c13587e4cda0c98d73ffa73ebd9decaa99d8e0b14d4bcd580edbe4481314e1e2c6
- SSDEEP 12288:hg49H6Uk4eG1sAdIT45vEUkGyAtMH4zlACoVw68rc+XLGqOlXgBrBYotNA6j8:649H6lKsfTIvrrJirqLGnlXqBY8A6j8
- TLSH T1E235BF02B7E99034F6F32B31AF7592554ABBBD629D35C60E23C4561D0DB0A80EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_b86b5ce6130fa60194b4a4426f86e721_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_b86b5ce6130fa60194b4a4426f86e721_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_b86b5ce6130fa60194b4a4426f86e721_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 c1c01643b5801e4c5a5d84b4fd738577f8c249030fd1152798f223016a528a3f
- MD5 b86b5ce6130fa60194b4a4426f86e721
- SHA1 5d53e9d7e905b8b0fba3ef9e289cd11fb776a613
- SHA512 7f59201c15efb542341ce87cd7b7677956e485798cab9d29ad1796a958c567c13587e4cda0c98d73ffa73ebd9decaa99d8e0b14d4bcd580edbe4481314e1e2c6
- SSDEEP 12288:hg49H6Uk4eG1sAdIT45vEUkGyAtMH4zlACoVw68rc+XLGqOlXgBrBYotNA6j8:649H6lKsfTIvrrJirqLGnlXqBY8A6j8
- TLSH T1E235BF02B7E99034F6F32B31AF7592554ABBBD629D35C60E23C4561D0DB0A80EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1