General
- Target 2026-07-28_5ff4fcfd42e7fcf262190566c2d561e9_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- Sample260728-2v6b1aybmf
- SHA256 891b139c01da6601de8aad6e0b7aa64520b2aecf7cd2b0b3e86bf07e56cc156d
- MD5 5ff4fcfd42e7fcf262190566c2d561e9
- SHA1 f8295c3781491e25aafe15eadd98b25c24c906cd
- SHA512 0a6b6c3a3945c5a19665a9f9ea1ecc97c005ea22965f493a314a534e8cfce5757e2795b328a820943b720f223338d7add09f3a85d325b4633c7434225907f3ab
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvvV:/uTs1gBpQL5kmh0671o1C1
- TLSH T169841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_5ff4fcfd42e7fcf262190566c2d561e9_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_5ff4fcfd42e7fcf262190566c2d561e9_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_5ff4fcfd42e7fcf262190566c2d561e9_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- SHA256 891b139c01da6601de8aad6e0b7aa64520b2aecf7cd2b0b3e86bf07e56cc156d
- MD5 5ff4fcfd42e7fcf262190566c2d561e9
- SHA1 f8295c3781491e25aafe15eadd98b25c24c906cd
- SHA512 0a6b6c3a3945c5a19665a9f9ea1ecc97c005ea22965f493a314a534e8cfce5757e2795b328a820943b720f223338d7add09f3a85d325b4633c7434225907f3ab
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvvV:/uTs1gBpQL5kmh0671o1C1
- TLSH T169841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Seven ransomware
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Adds Run key to start application