General
- Target 2026-07-18_e83685cd807cf12c96801a178711fc85_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260718-gns3wac18w
- SHA256 0f2afbc29559dd8d15d06ba9e63e1a219f81c9d6adddf8b8af3557a96690e4fb
- MD5 e83685cd807cf12c96801a178711fc85
- SHA1 68b06da9cd8114d093200496f747578a969df1ba
- SHA512 58b0916e046dd69279f42521f7caeaaef9b0b757f6a1bce22a45dc6cc737f01b7a570b8a74e370c4603cb83208e66e49be4ce9f53b5136f056cfc9c06e2e1430
- SSDEEP 12288:mg49H6a+pwNj1AdCa9QKAmXAizvK03sZxU896512e3DsBSabRo+vhrw8DSDNU6tJ:949H6JI1ja9UBGFEHkAD94BU6toi
- TLSH T1AB35BE02B7E9A034F2F31B31AFB552655A7BBD72AD35C60E23C41A0D19B0990E974B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_e83685cd807cf12c96801a178711fc85_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_e83685cd807cf12c96801a178711fc85_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260710-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_e83685cd807cf12c96801a178711fc85_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 0f2afbc29559dd8d15d06ba9e63e1a219f81c9d6adddf8b8af3557a96690e4fb
- MD5 e83685cd807cf12c96801a178711fc85
- SHA1 68b06da9cd8114d093200496f747578a969df1ba
- SHA512 58b0916e046dd69279f42521f7caeaaef9b0b757f6a1bce22a45dc6cc737f01b7a570b8a74e370c4603cb83208e66e49be4ce9f53b5136f056cfc9c06e2e1430
- SSDEEP 12288:mg49H6a+pwNj1AdCa9QKAmXAizvK03sZxU896512e3DsBSabRo+vhrw8DSDNU6tJ:949H6JI1ja9UBGFEHkAD94BU6toi
- TLSH T1AB35BE02B7E9A034F2F31B31AFB552655A7BBD72AD35C60E23C41A0D19B0990E974B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1