General
- Target 2026-07-28_2e184738cb7ed1903edc79de68575ae1_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- Sample260728-xn996atclb
- SHA256 c184959241a54fe278f4e6a90125a3d501477f66c4a148d490776a8076711cd0
- MD5 2e184738cb7ed1903edc79de68575ae1
- SHA1 d480dcf4f4bff4ea75f9eb634329fe3100e4f9d3
- SHA512 607cea4efc7423269e34458d3c8bcc1c783363a77e810e7e9ad04a2c1e4de14d6a1c8e63815bbe4e4b878389479f4b582fdaa1a7fa3f8d8fc84c3d2393e02016
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvvV:/uTs1gBpQL5kmh0671o1C1
- TLSH T1D6841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_2e184738cb7ed1903edc79de68575ae1_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_2e184738cb7ed1903edc79de68575ae1_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_2e184738cb7ed1903edc79de68575ae1_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- SHA256 c184959241a54fe278f4e6a90125a3d501477f66c4a148d490776a8076711cd0
- MD5 2e184738cb7ed1903edc79de68575ae1
- SHA1 d480dcf4f4bff4ea75f9eb634329fe3100e4f9d3
- SHA512 607cea4efc7423269e34458d3c8bcc1c783363a77e810e7e9ad04a2c1e4de14d6a1c8e63815bbe4e4b878389479f4b582fdaa1a7fa3f8d8fc84c3d2393e02016
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvvV:/uTs1gBpQL5kmh0671o1C1
- TLSH T1D6841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Seven ransomware
- Custom signature
UPX dump on OEP (original entry point)
Executes dropped EXE
Adds Run key to start application