General
- Target 2026-08-03_42e989837ed026e47c0c920b340180f4_bkransomware_elex_hawkeye_maze_remcos
- Size 469KB
- Sample260803-c88lvaxbla
- SHA256 f5c120f8a77bbc7961f614557faf35548c0c4e86c8c109bf32bd6d1149013559
- MD5 42e989837ed026e47c0c920b340180f4
- SHA1 4b01c33961a2d2282a6baf70cc7ba58185954e91
- SHA512 752aca8790a7aff6b820a78d4cc3f1fdd303b5b0597b11d9e7f1b1b1f765c1b27b343cc2d7bcf7828b96e593193b055a3ce593761549a0b47e3d2dcf05b10149
- SSDEEP 6144:yoyZmTAsfJFakxaLjcMkc0Cax1P8Gp6bYA0w601+dNT9/0626ASkVOAFE4:yoyIJsMPrP5p6bYboEdN1
- TLSH T1DEA4190277E89135F2F31B31AEB992615A7ABC719D35D20F23D41A0D0DB0A90EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_42e989837ed026e47c0c920b340180f4_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_42e989837ed026e47c0c920b340180f4_bkransomware_elex_hawkeye_maze_remcos
- Size 469KB
- SHA256 f5c120f8a77bbc7961f614557faf35548c0c4e86c8c109bf32bd6d1149013559
- MD5 42e989837ed026e47c0c920b340180f4
- SHA1 4b01c33961a2d2282a6baf70cc7ba58185954e91
- SHA512 752aca8790a7aff6b820a78d4cc3f1fdd303b5b0597b11d9e7f1b1b1f765c1b27b343cc2d7bcf7828b96e593193b055a3ce593761549a0b47e3d2dcf05b10149
- SSDEEP 6144:yoyZmTAsfJFakxaLjcMkc0Cax1P8Gp6bYA0w601+dNT9/0626ASkVOAFE4:yoyIJsMPrP5p6bYboEdN1
- TLSH T1DEA4190277E89135F2F31B31AEB992615A7ABC719D35D20F23D41A0D0DB0A90EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.