General
- Target 2026-07-18_dca3dc8ce8cd58fc027eeaf4b58808e7_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260718-gvda1adv21
- SHA256 ff18ca58baf29449cf95298d2e789dd93fa2e4ac0e81e729273528133732bb0c
- MD5 dca3dc8ce8cd58fc027eeaf4b58808e7
- SHA1 329041544b97268cd086afc2ece7dfe326d4f8f3
- SHA512 32936f7c03cfdb5bb0327f62b28f9540509317047753cf174c8a93e48f7dcdbf43d029a3159cce64c3c6848b7ffa66084ab0f34b3cd87b40cf4e97257dbc9068
- SSDEEP 24576:949H6XM72o2eplWgRg9dvd4Orbwb2JCp8ZO5H:94p6XM7OepIgaCOrsaJ7ZO5
- TLSH T1C435BE12B7E99034F6F32B31AF7592654A7ABD629D35C60F23C4160D4DB0A80EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_dca3dc8ce8cd58fc027eeaf4b58808e7_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_dca3dc8ce8cd58fc027eeaf4b58808e7_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 ff18ca58baf29449cf95298d2e789dd93fa2e4ac0e81e729273528133732bb0c
- MD5 dca3dc8ce8cd58fc027eeaf4b58808e7
- SHA1 329041544b97268cd086afc2ece7dfe326d4f8f3
- SHA512 32936f7c03cfdb5bb0327f62b28f9540509317047753cf174c8a93e48f7dcdbf43d029a3159cce64c3c6848b7ffa66084ab0f34b3cd87b40cf4e97257dbc9068
- SSDEEP 24576:949H6XM72o2eplWgRg9dvd4Orbwb2JCp8ZO5H:94p6XM7OepIgaCOrsaJ7ZO5
- TLSH T1C435BE12B7E99034F6F32B31AF7592654A7ABD629D35C60F23C4160D4DB0A80EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1