General
- Target 2026-07-21_3927d38e7d6897484e919c7d7a29d45b_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260721-c9186aew2v
- SHA256 075009788e3c11d1ba53e7f973cd0038745b83e37a294702abdf35805e1ffa8f
- MD5 3927d38e7d6897484e919c7d7a29d45b
- SHA1 e0eea54b1a69561656eeb0eca97f752bb487ab66
- SHA512 637b9b540f5321c12f4c837490f633c86e68de1d09d40dcbdd900ce47de6476a9ede40f760cafc414fc8ded2a56e2f285bad00be84469ea0e1bd691442a89c26
- SSDEEP 24576:649H6iqyuyxcevvL+djiukogUA3vWPncdN:64p6iqyuyxpvvqVko9okcv
- TLSH T11E35BF02B7E9A174F1F31B31AF7552658A7BBC629D35C60E23D41A0D0DB0A90EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_3927d38e7d6897484e919c7d7a29d45b_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_3927d38e7d6897484e919c7d7a29d45b_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 075009788e3c11d1ba53e7f973cd0038745b83e37a294702abdf35805e1ffa8f
- MD5 3927d38e7d6897484e919c7d7a29d45b
- SHA1 e0eea54b1a69561656eeb0eca97f752bb487ab66
- SHA512 637b9b540f5321c12f4c837490f633c86e68de1d09d40dcbdd900ce47de6476a9ede40f760cafc414fc8ded2a56e2f285bad00be84469ea0e1bd691442a89c26
- SSDEEP 24576:649H6iqyuyxcevvL+djiukogUA3vWPncdN:64p6iqyuyxpvvqVko9okcv
- TLSH T11E35BF02B7E9A174F1F31B31AF7552658A7BBC629D35C60E23D41A0D0DB0A90EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1