General
- Target 2026-07-28_aa966fc3bdf3ff6f7efac13ad82f3bbd_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- Sample260728-w11qtaba47
- SHA256 d5cf7191901a6ef3c6615abc9f5c31974a21ff703a07e8aea0297be62d6f9816
- MD5 aa966fc3bdf3ff6f7efac13ad82f3bbd
- SHA1 68e824cd0d950ec0c18ee26adebab25c977d2ac0
- SHA512 182573d132b5d79f84fb3836c1688a38c08afb579054aff91b0b70bcdf51500f3f1c2f2fb71e8826ae39662088f3ea6afbbd0d065e8470524dfafe44e93e5717
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvv+:/uTs1gBpQL5kmh0671o1Ce
- TLSH T178841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_aa966fc3bdf3ff6f7efac13ad82f3bbd_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_aa966fc3bdf3ff6f7efac13ad82f3bbd_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_aa966fc3bdf3ff6f7efac13ad82f3bbd_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- SHA256 d5cf7191901a6ef3c6615abc9f5c31974a21ff703a07e8aea0297be62d6f9816
- MD5 aa966fc3bdf3ff6f7efac13ad82f3bbd
- SHA1 68e824cd0d950ec0c18ee26adebab25c977d2ac0
- SHA512 182573d132b5d79f84fb3836c1688a38c08afb579054aff91b0b70bcdf51500f3f1c2f2fb71e8826ae39662088f3ea6afbbd0d065e8470524dfafe44e93e5717
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvv+:/uTs1gBpQL5kmh0671o1Ce
- TLSH T178841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Seven ransomware
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Adds Run key to start application