General
- Target 2026-07-28_246e964a71e80893e229c4c0aff65860_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- Sample260728-3ddfbsce46
- SHA256 49bb9fde1c318dda2162e58df269ad08640b64e80734d9a68d5d1f325312316c
- MD5 246e964a71e80893e229c4c0aff65860
- SHA1 78a740971973be8953b5612a084c6cde01e4f163
- SHA512 55f3aa83914874a6dca56989037e7f88936d80f39b8d62e9a66eb8b36aaa488c1f8cd71bdfacca81d2772984e21f7c69b6d211bae7740f082c03fc33e1ca508c
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvv9:/uTs1gBpQL5kmh0671o1Cd
- TLSH T139841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_246e964a71e80893e229c4c0aff65860_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_246e964a71e80893e229c4c0aff65860_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_246e964a71e80893e229c4c0aff65860_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- SHA256 49bb9fde1c318dda2162e58df269ad08640b64e80734d9a68d5d1f325312316c
- MD5 246e964a71e80893e229c4c0aff65860
- SHA1 78a740971973be8953b5612a084c6cde01e4f163
- SHA512 55f3aa83914874a6dca56989037e7f88936d80f39b8d62e9a66eb8b36aaa488c1f8cd71bdfacca81d2772984e21f7c69b6d211bae7740f082c03fc33e1ca508c
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvv9:/uTs1gBpQL5kmh0671o1Cd
- TLSH T139841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Seven ransomware
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Adds Run key to start application