General
- Target 2026-08-03_86adeb1d66f5ecee7701243f375e7064_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260804-m4mhxsdk6w
- SHA256 171862e553d0040944f606aae14c70f5d7df3132ead7312992cc7c9a5fd04c17
- MD5 86adeb1d66f5ecee7701243f375e7064
- SHA1 c11e0e2ca481628d51e8cbdd68e2fdf8e07434d1
- SHA512 06a0f946048ac83f18087d514735520ad673699903c2fc669edd85d310cffd271c615907808e97dc4d04de314f6beec5e27c928ac6aeef374567c055b3c1b845
- SSDEEP 12288:9g49H6MjFsN8PAdYjFM+wq0wyqHsuP101U6vASOGfFFre9loNGMcUOU3QWj8htv/:u49H6yjPpjuBSHsu2UhowloNLQWozSk
- TLSH T1FC35BF02B7F99134F6F31B31AFB492655A7ABC629D35C70E23D41A0D09B0980EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_86adeb1d66f5ecee7701243f375e7064_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_86adeb1d66f5ecee7701243f375e7064_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 171862e553d0040944f606aae14c70f5d7df3132ead7312992cc7c9a5fd04c17
- MD5 86adeb1d66f5ecee7701243f375e7064
- SHA1 c11e0e2ca481628d51e8cbdd68e2fdf8e07434d1
- SHA512 06a0f946048ac83f18087d514735520ad673699903c2fc669edd85d310cffd271c615907808e97dc4d04de314f6beec5e27c928ac6aeef374567c055b3c1b845
- SSDEEP 12288:9g49H6MjFsN8PAdYjFM+wq0wyqHsuP101U6vASOGfFFre9loNGMcUOU3QWj8htv/:u49H6yjPpjuBSHsu2UhowloNLQWozSk
- TLSH T1FC35BF02B7F99134F6F31B31AFB492655A7ABC629D35C70E23D41A0D09B0980EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1