General
- Target 2026-07-21_fa684808dd0062f582b07d8c5d54e900_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260721-cslr5sct5l
- SHA256 5abc913310e1f9311476185094d08f331901d8d482d89efc36f6b449d19efbeb
- MD5 fa684808dd0062f582b07d8c5d54e900
- SHA1 448ce65d6d29f89151d6d5bdedf487efbadc2a32
- SHA512 6e54af8019283f576f08db9bd89d6ca205af2ba5f3ff8bdeea8d5a99dcd379a46f05bdf6efc26f96bf86b27ad06034457f076fc922a1e6b60634bbefecbf9535
- SSDEEP 12288:bg49H6ooDsNOUAdIk4CEB4ToXuSTOuSPtuQmMVI877OvmcDnvASWRl:c49H65vUOqhufBVuQmkI8OOcjvbSl
- TLSH T1BD35BF02B7F99074F6F31B31AFB992555ABABD629D35C60F2384190D0DB0980EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_fa684808dd0062f582b07d8c5d54e900_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_fa684808dd0062f582b07d8c5d54e900_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 5abc913310e1f9311476185094d08f331901d8d482d89efc36f6b449d19efbeb
- MD5 fa684808dd0062f582b07d8c5d54e900
- SHA1 448ce65d6d29f89151d6d5bdedf487efbadc2a32
- SHA512 6e54af8019283f576f08db9bd89d6ca205af2ba5f3ff8bdeea8d5a99dcd379a46f05bdf6efc26f96bf86b27ad06034457f076fc922a1e6b60634bbefecbf9535
- SSDEEP 12288:bg49H6ooDsNOUAdIk4CEB4ToXuSTOuSPtuQmMVI877OvmcDnvASWRl:c49H65vUOqhufBVuQmkI8OOcjvbSl
- TLSH T1BD35BF02B7F99074F6F31B31AFB992555ABABD629D35C60F2384190D0DB0980EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1