General
- Target 2026-07-29_fa3e02c623e7339329f6c70f179986c5_bkransomware_elex_hawkeye_maze_remcos
- Size 1.6MB
- Sample260729-mdrd7a1fnb
- SHA256 0bf989ce25e6b0de93a5e89a3e066fee8dbb3ed5447817ecb8b702b71a5397fe
- MD5 fa3e02c623e7339329f6c70f179986c5
- SHA1 c754c172312610296fdacb57d1d9f9c9d047aa4d
- SHA512 0cedc22dd0bf70127a7868da120bd3b0ca462bafa202d93dddec2a267b39b640c1ee5b421793986f6c45ddf7840dc0d0f531a67b2d947ad798d95821eb92907e
- SSDEEP 12288:Rg49H6sRgsNtbAdUrGnBM7L0upU+1y+AYXmUbibGqiMIjmYP2Fucf7N8zzI8tEV:q49H6UpbaBMvjRA+iqMIjmJ8c+hE
- TLSH T13475BF0273E99134F6F32B31AFB592659A7ABC72AD35C60F23C4160D09B0990E975B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_fa3e02c623e7339329f6c70f179986c5_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_fa3e02c623e7339329f6c70f179986c5_bkransomware_elex_hawkeye_maze_remcos
- Size 1.6MB
- SHA256 0bf989ce25e6b0de93a5e89a3e066fee8dbb3ed5447817ecb8b702b71a5397fe
- MD5 fa3e02c623e7339329f6c70f179986c5
- SHA1 c754c172312610296fdacb57d1d9f9c9d047aa4d
- SHA512 0cedc22dd0bf70127a7868da120bd3b0ca462bafa202d93dddec2a267b39b640c1ee5b421793986f6c45ddf7840dc0d0f531a67b2d947ad798d95821eb92907e
- SSDEEP 12288:Rg49H6sRgsNtbAdUrGnBM7L0upU+1y+AYXmUbibGqiMIjmYP2Fucf7N8zzI8tEV:q49H6UpbaBMvjRA+iqMIjmJ8c+hE
- TLSH T13475BF0273E99134F6F32B31AFB592659A7ABC72AD35C60F23C4160D09B0990E975B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1