General
- Target 2026-08-04_40b934a4ef0a2738bd14b4b418e83b85_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- Sample260804-jelnjsak6v
- SHA256 98ae282a4689264f43e3e6f5c0eb2a4b4a119e776e4488385c968c68100278f5
- MD5 40b934a4ef0a2738bd14b4b418e83b85
- SHA1 24f04958ab60062698c04bd6d9bb2fefcc965466
- SHA512 c253dbc78428dee80b1a79dfe347478baf1f66984949968c25057cf6b4134d20d54e3a6ac7d3c3434464f7297982dbbb9876e11e2ae68d346e48fb15bc75bced
- SSDEEP 6144:bv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFTRA:bg49H61RgsNtbAdG
- TLSH T147A41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_40b934a4ef0a2738bd14b4b418e83b85_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_40b934a4ef0a2738bd14b4b418e83b85_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- SHA256 98ae282a4689264f43e3e6f5c0eb2a4b4a119e776e4488385c968c68100278f5
- MD5 40b934a4ef0a2738bd14b4b418e83b85
- SHA1 24f04958ab60062698c04bd6d9bb2fefcc965466
- SHA512 c253dbc78428dee80b1a79dfe347478baf1f66984949968c25057cf6b4134d20d54e3a6ac7d3c3434464f7297982dbbb9876e11e2ae68d346e48fb15bc75bced
- SSDEEP 6144:bv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFTRA:bg49H61RgsNtbAdG
- TLSH T147A41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.