General
- Target 2026-08-06_591d95d118f747d754a220dde9370e9a_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260806-bzrfja1bnf
- SHA256 1fe786410e8c6006fe7d65ffb94fa4ba33f22a69c4633ee4e5db0de2ba17081f
- MD5 591d95d118f747d754a220dde9370e9a
- SHA1 7b9c70e5d10cc9a4c757ea603c5fe5937cbf8f5b
- SHA512 278b2b440214a67cb78f66c2e65f13a39b112789afbc8870d740e4bbd7d514ac41ad97ef4e0073d2919434055b246feaacd283e5a18374b197d0b35e18b3dba7
- SSDEEP 12288:sg49H6aBdsNtbAdvogFyp7LP5juhDaCZONj+T0mV2CvZYjQrtv3Q1pB9/jEbjQJY:749H6+qbZyyXuhtOKV2gYT1pMoJkabqD
- TLSH T1BC35BF02B3E99074F2F32B31AFB952655A7BBD629D35C60E23D4150D0DB0A90EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_591d95d118f747d754a220dde9370e9a_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_591d95d118f747d754a220dde9370e9a_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 1fe786410e8c6006fe7d65ffb94fa4ba33f22a69c4633ee4e5db0de2ba17081f
- MD5 591d95d118f747d754a220dde9370e9a
- SHA1 7b9c70e5d10cc9a4c757ea603c5fe5937cbf8f5b
- SHA512 278b2b440214a67cb78f66c2e65f13a39b112789afbc8870d740e4bbd7d514ac41ad97ef4e0073d2919434055b246feaacd283e5a18374b197d0b35e18b3dba7
- SSDEEP 12288:sg49H6aBdsNtbAdvogFyp7LP5juhDaCZONj+T0mV2CvZYjQrtv3Q1pB9/jEbjQJY:749H6+qbZyyXuhtOKV2gYT1pMoJkabqD
- TLSH T1BC35BF02B3E99074F2F32B31AFB952655A7BBD629D35C60E23D4150D0DB0A90EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1