General
- Target 2026-08-04_b9e4f835fde3c62213228eca68f211eb_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- Sample260804-gdms4sgp2x
- SHA256 3878da19daed2bd858a656f1c7e6638d08cc6a2f6eb33550e894ffd2434f63eb
- MD5 b9e4f835fde3c62213228eca68f211eb
- SHA1 f323331ff13c3a48930799b767c6a7003ba738a4
- SHA512 e55be6127c60ea4deac23103bb890ae53f047d775bb40ca563627adcb50ac0a24ab5307150f5e6f8411838c608134fafefaaad1953c25f363720d5c247b26f87
- SSDEEP 6144:Av9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFtRA:Ag49H61RgsNtbAdI
- TLSH T135A41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_b9e4f835fde3c62213228eca68f211eb_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_b9e4f835fde3c62213228eca68f211eb_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- SHA256 3878da19daed2bd858a656f1c7e6638d08cc6a2f6eb33550e894ffd2434f63eb
- MD5 b9e4f835fde3c62213228eca68f211eb
- SHA1 f323331ff13c3a48930799b767c6a7003ba738a4
- SHA512 e55be6127c60ea4deac23103bb890ae53f047d775bb40ca563627adcb50ac0a24ab5307150f5e6f8411838c608134fafefaaad1953c25f363720d5c247b26f87
- SSDEEP 6144:Av9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFtRA:Ag49H61RgsNtbAdI
- TLSH T135A41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.