General
- Target 2026-07-31_67925b381654e12c319fa7c853800405_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260731-dh2laavth1
- SHA256 d20365df982e44e246bc4a83691b9f60261cd921b90b02f938a305f4c6700d4f
- MD5 67925b381654e12c319fa7c853800405
- SHA1 e6ce6ff1f17b5a9ceb3e0af826ba6cae810c8b27
- SHA512 e54ae50b14ccb68f90c221b5d14f1d9d760499f4900d4772b266f1316afbaed39038b7ae4a5fc44b1c6908ea0d2856e9d2a51e7651803d9651954197f9b269ce
- SSDEEP 12288:bg49H6Ztt2NjHAd5OpagJNmT3GLuqWPMrZNfMi3osu+KGRPwcd3ATzBEJWgX:c49H6X+HSOpayI7qWwfMaCGRdd3aEHX
- TLSH T15935BF02B7F99174F2F32B31AFB952554ABABC629D35C60F23C4190D49B0A90E935B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_67925b381654e12c319fa7c853800405_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_67925b381654e12c319fa7c853800405_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 d20365df982e44e246bc4a83691b9f60261cd921b90b02f938a305f4c6700d4f
- MD5 67925b381654e12c319fa7c853800405
- SHA1 e6ce6ff1f17b5a9ceb3e0af826ba6cae810c8b27
- SHA512 e54ae50b14ccb68f90c221b5d14f1d9d760499f4900d4772b266f1316afbaed39038b7ae4a5fc44b1c6908ea0d2856e9d2a51e7651803d9651954197f9b269ce
- SSDEEP 12288:bg49H6Ztt2NjHAd5OpagJNmT3GLuqWPMrZNfMi3osu+KGRPwcd3ATzBEJWgX:c49H6X+HSOpayI7qWwfMaCGRdd3aEHX
- TLSH T15935BF02B7F99174F2F32B31AFB952554ABABC629D35C60F23C4190D49B0A90E935B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1