General
- Target 2026-07-28_f3514c1e69d0ee487af164344fc1a183_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- Sample260728-t7kbasac62
- SHA256 286ec32e528cc9efb41bb955e7bd567f86e2496d0eddbb5d85a40a25c51746da
- MD5 f3514c1e69d0ee487af164344fc1a183
- SHA1 4fa3cd3685961736a9b9999d0eb33a4936bf523c
- SHA512 32dba620d3c48f9566d4347ecdd5614511bf42a37aa0ba00019b377445020b0b7a65a09f8998a6ccb88ff33767df05141bc3667645948810d549a2a3637a9f9e
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvvF:/uTs1gBpQL5kmh0671o1Cl
- TLSH T1D1841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_f3514c1e69d0ee487af164344fc1a183_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_f3514c1e69d0ee487af164344fc1a183_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_f3514c1e69d0ee487af164344fc1a183_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- SHA256 286ec32e528cc9efb41bb955e7bd567f86e2496d0eddbb5d85a40a25c51746da
- MD5 f3514c1e69d0ee487af164344fc1a183
- SHA1 4fa3cd3685961736a9b9999d0eb33a4936bf523c
- SHA512 32dba620d3c48f9566d4347ecdd5614511bf42a37aa0ba00019b377445020b0b7a65a09f8998a6ccb88ff33767df05141bc3667645948810d549a2a3637a9f9e
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvvF:/uTs1gBpQL5kmh0671o1Cl
- TLSH T1D1841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Seven ransomware
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Adds Run key to start application