General
- Target 2026-08-03_8adc38384b84563b86f9a7131581d041_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260804-m1yrsatyaz
- SHA256 241ce1979fa2eaa2e0e237c1763c813e4f81e8c9d81ae47e7d03341077469047
- MD5 8adc38384b84563b86f9a7131581d041
- SHA1 276bfc8765c69743fa1fcfbe9e5370cd4ab99c0a
- SHA512 41a988ae9db3d8009597bfa0044883e454588da9076b8ff97dcd53b605e50f3ccfb6233e2a27ceed446c7948d6fddb7b6356f47635e5b81cb45cc6f19d38141c
- SSDEEP 24576:949H6rIleaH1MeJo5zQCXlU0k5uNekggA5m68Z:94p6rIlt0Vi5uN8gP6
- TLSH T1C935BF02B3E99135F2F31B31AFB592655ABABC729D35C60F23C4191D19B0980EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_8adc38384b84563b86f9a7131581d041_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_8adc38384b84563b86f9a7131581d041_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 241ce1979fa2eaa2e0e237c1763c813e4f81e8c9d81ae47e7d03341077469047
- MD5 8adc38384b84563b86f9a7131581d041
- SHA1 276bfc8765c69743fa1fcfbe9e5370cd4ab99c0a
- SHA512 41a988ae9db3d8009597bfa0044883e454588da9076b8ff97dcd53b605e50f3ccfb6233e2a27ceed446c7948d6fddb7b6356f47635e5b81cb45cc6f19d38141c
- SSDEEP 24576:949H6rIleaH1MeJo5zQCXlU0k5uNekggA5m68Z:94p6rIlt0Vi5uN8gP6
- TLSH T1C935BF02B3E99135F2F31B31AFB592655ABABC729D35C60F23C4191D19B0980EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1