General
- Target 2026-08-03_15c7725ab7c72f0e0592b2a5e9ad2b97_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260804-p724wsxtex
- SHA256 01ddd879e079a38e6583257c1f6432e755bc7cbfdbe4cf813545306c0d792b77
- MD5 15c7725ab7c72f0e0592b2a5e9ad2b97
- SHA1 56487d9fbd631b41ac2751ffeb001165cd7a7c7b
- SHA512 161b6ef06ba2a4ca96cd1026ffe7f300bdf422e4f7b79fe4a95b8f25907a42e721e4dd67ec2985a61dd6c9fe4b2f582224ee49e5e64f77c9660d90e70045211a
- SSDEEP 12288:mg49H6enzsNbQAdaDOotBjbVIL7SL3iKyrBn1cxJNTOwPL2tOa6AYybX6AM:949H6QKQ9ZvbzuKencnTgVoAM
- TLSH T19035BF02B7E99134F2F31B31AFB592655A7BBC629D35C60E23C41A1D0DB0980EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_15c7725ab7c72f0e0592b2a5e9ad2b97_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_15c7725ab7c72f0e0592b2a5e9ad2b97_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_15c7725ab7c72f0e0592b2a5e9ad2b97_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 01ddd879e079a38e6583257c1f6432e755bc7cbfdbe4cf813545306c0d792b77
- MD5 15c7725ab7c72f0e0592b2a5e9ad2b97
- SHA1 56487d9fbd631b41ac2751ffeb001165cd7a7c7b
- SHA512 161b6ef06ba2a4ca96cd1026ffe7f300bdf422e4f7b79fe4a95b8f25907a42e721e4dd67ec2985a61dd6c9fe4b2f582224ee49e5e64f77c9660d90e70045211a
- SSDEEP 12288:mg49H6enzsNbQAdaDOotBjbVIL7SL3iKyrBn1cxJNTOwPL2tOa6AYybX6AM:949H6QKQ9ZvbzuKencnTgVoAM
- TLSH T19035BF02B7E99134F2F31B31AFB592655A7BBC629D35C60E23C41A1D0DB0980EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1