General
- Target 2026-08-04_443a0b3eae231f982aadfc6f75120270_bkransomware_elex_hawkeye_maze_remcos
- Size 1.6MB
- Sample260804-jccb4ayzey
- SHA256 9359ae2322ea27282ab9e2ec56eadad508600de646912ba23d40341d9cdfcd6c
- MD5 443a0b3eae231f982aadfc6f75120270
- SHA1 262ca689ce7cc496ead1e97581435df60758f9e1
- SHA512 707d2bac84c3022322f44fccb9aaef4de4d53889b34efd465c37242832600970792fcdd4972258f7260636e3d7d34dd5f41a5372f9561df493b3814b090ecde2
- SSDEEP 24576:m49H6Upb70ZqLjqxEG3wuRQZsPeI0mwYT:m4p6Upb7+qPgE8wiQZ
- TLSH T13975AE02B7E99174F2F31B31AFB592659ABABC629D35C60F23C4190D0DB0990E974B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_443a0b3eae231f982aadfc6f75120270_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_443a0b3eae231f982aadfc6f75120270_bkransomware_elex_hawkeye_maze_remcos
- Size 1.6MB
- SHA256 9359ae2322ea27282ab9e2ec56eadad508600de646912ba23d40341d9cdfcd6c
- MD5 443a0b3eae231f982aadfc6f75120270
- SHA1 262ca689ce7cc496ead1e97581435df60758f9e1
- SHA512 707d2bac84c3022322f44fccb9aaef4de4d53889b34efd465c37242832600970792fcdd4972258f7260636e3d7d34dd5f41a5372f9561df493b3814b090ecde2
- SSDEEP 24576:m49H6Upb70ZqLjqxEG3wuRQZsPeI0mwYT:m4p6Upb7+qPgE8wiQZ
- TLSH T13975AE02B7E99174F2F31B31AFB592659ABABC629D35C60F23C4190D0DB0990E974B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1