General
- Target 2026-08-03_c3de58cb30c57bd3a60d7377da5dea1d_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260804-lvsg5ssxhw
- SHA256 2126a044e89aa183d47493ba590e17157524ce3a6c3352bf0b1bf6e1bf189c91
- MD5 c3de58cb30c57bd3a60d7377da5dea1d
- SHA1 8774441b26abd665f3f1c3bfc865ff416c789463
- SHA512 51f7d8978ee062298f61e0dcb83f15f61c78a865c85f9405111b9af60faa6285d325eb31da69ee30574e8eae7afee02244a325a604968a0521e6fe40e30104d7
- SSDEEP 12288:mg49H6kYOMNGVAduaXKLL9TxwxQo4SuDQLYc1rt3U43kEvvCmFbF/dlELq+jlpDG:949H6dsVFsKLxoNv3r82LMe+jnU3F
- TLSH T1FC35BF02B7F99134F2F31B31AF7592659ABABC629D35C60E23C4161D1DB4980EA74B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_c3de58cb30c57bd3a60d7377da5dea1d_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_c3de58cb30c57bd3a60d7377da5dea1d_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 2126a044e89aa183d47493ba590e17157524ce3a6c3352bf0b1bf6e1bf189c91
- MD5 c3de58cb30c57bd3a60d7377da5dea1d
- SHA1 8774441b26abd665f3f1c3bfc865ff416c789463
- SHA512 51f7d8978ee062298f61e0dcb83f15f61c78a865c85f9405111b9af60faa6285d325eb31da69ee30574e8eae7afee02244a325a604968a0521e6fe40e30104d7
- SSDEEP 12288:mg49H6kYOMNGVAduaXKLL9TxwxQo4SuDQLYc1rt3U43kEvvCmFbF/dlELq+jlpDG:949H6dsVFsKLxoNv3r82LMe+jnU3F
- TLSH T1FC35BF02B7F99134F2F31B31AF7592659ABABC629D35C60E23C4161D1DB4980EA74B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1