General
- Target 2026-07-28_7ebbfa8403ba6cfea2a097ef9a16b44f_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- Sample260728-2md8jsbk3y
- SHA256 7964e174f9408eac501652965b12685ad762d7327980781a5581abeecca975f2
- MD5 7ebbfa8403ba6cfea2a097ef9a16b44f
- SHA1 bb13829b0308496bcb4900cb0803a37e6c285fa2
- SHA512 0315187959d9535d3d6bbb563e3db90f948b9fec24a7a2609c76dc0681f57f167c645faf0bf804fd2ffd93cc512c1e2013553bb61fd81a9f50fd56afc4193224
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvv9:/uTs1gBpQL5kmh0671o1Cd
- TLSH T1B7841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_7ebbfa8403ba6cfea2a097ef9a16b44f_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_7ebbfa8403ba6cfea2a097ef9a16b44f_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_7ebbfa8403ba6cfea2a097ef9a16b44f_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- SHA256 7964e174f9408eac501652965b12685ad762d7327980781a5581abeecca975f2
- MD5 7ebbfa8403ba6cfea2a097ef9a16b44f
- SHA1 bb13829b0308496bcb4900cb0803a37e6c285fa2
- SHA512 0315187959d9535d3d6bbb563e3db90f948b9fec24a7a2609c76dc0681f57f167c645faf0bf804fd2ffd93cc512c1e2013553bb61fd81a9f50fd56afc4193224
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvv9:/uTs1gBpQL5kmh0671o1Cd
- TLSH T1B7841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Seven ransomware
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Adds Run key to start application