General
- Target 2026-07-28_ea50885f08ad7f4bb115eb6d292e3c94_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- Sample260728-1rdbdayway
- SHA256 13e46723014d564aa72029473d3ec8201721ecd716ee97a792b687f806d71c9a
- MD5 ea50885f08ad7f4bb115eb6d292e3c94
- SHA1 103c2fa8a52cf71da5811ba2eac04a69173bb9c5
- SHA512 948c9ca7ac65de6b42fcbec053948a9adff15a35e61c7082f9f70b99e19e5d33b8edb4e2d42b9290fec971cda25a7fed9ace7a635b7a21597240eb135058fba4
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvvV:/uTs1gBpQL5kmh0671o1C1
- TLSH T1A7841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_ea50885f08ad7f4bb115eb6d292e3c94_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_ea50885f08ad7f4bb115eb6d292e3c94_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_ea50885f08ad7f4bb115eb6d292e3c94_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- SHA256 13e46723014d564aa72029473d3ec8201721ecd716ee97a792b687f806d71c9a
- MD5 ea50885f08ad7f4bb115eb6d292e3c94
- SHA1 103c2fa8a52cf71da5811ba2eac04a69173bb9c5
- SHA512 948c9ca7ac65de6b42fcbec053948a9adff15a35e61c7082f9f70b99e19e5d33b8edb4e2d42b9290fec971cda25a7fed9ace7a635b7a21597240eb135058fba4
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvvV:/uTs1gBpQL5kmh0671o1C1
- TLSH T1A7841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Seven ransomware
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Adds Run key to start application