General
- Target 2026-07-20_abda0ca4cea81188dde74f1805b0e853_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260720-c67a1afw4v
- SHA256 931bf4a4ca2746aa2466d889404994d9cd337e67e5daeab05698843e52a88e49
- MD5 abda0ca4cea81188dde74f1805b0e853
- SHA1 e00c6ec31a19c6a88cdafa0678154153bac5f9ad
- SHA512 ddb3b94cbda013668142f7be3530f4b022dc9f767363397cdc439195c2023f52ad8b9796a0b67eb8abfaee5caa17077031424419a6a1a68e9a3858d019a905bb
- SSDEEP 12288:mg49H6ttWpGEdAdyGpVzbsVSjcrFCeoQ83J1+WevqmLzUqSer:949H6jCdOpBbsVLFdoQ8b5CqmLYq
- TLSH T1F635BF02B7F9A134F1F31B31AFB592655A7ABD629D35C60F23D41A0D19B0980EA34B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_abda0ca4cea81188dde74f1805b0e853_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_abda0ca4cea81188dde74f1805b0e853_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 931bf4a4ca2746aa2466d889404994d9cd337e67e5daeab05698843e52a88e49
- MD5 abda0ca4cea81188dde74f1805b0e853
- SHA1 e00c6ec31a19c6a88cdafa0678154153bac5f9ad
- SHA512 ddb3b94cbda013668142f7be3530f4b022dc9f767363397cdc439195c2023f52ad8b9796a0b67eb8abfaee5caa17077031424419a6a1a68e9a3858d019a905bb
- SSDEEP 12288:mg49H6ttWpGEdAdyGpVzbsVSjcrFCeoQ83J1+WevqmLzUqSer:949H6jCdOpBbsVLFdoQ8b5CqmLYq
- TLSH T1F635BF02B7F9A134F1F31B31AFB592655A7ABD629D35C60F23D41A0D19B0980EA34B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1