General
- Target 2026-08-07_41c48e504f27ecf519394ffb78b33f13_elex_hawkeye_remcos_stop
- Size 5.3MB
- Sample260808-bwpsjaxeje
- SHA256 75d038f9ba628d13bfdc72de82955ac867dcd4f450da7c4255c5e57ca7adf8bc
- MD5 41c48e504f27ecf519394ffb78b33f13
- SHA1 db23a99cebae294145d88132ab46204f671e42d0
- SHA512 53bd8c38d868bb0149d21f13f65a6984324633466249af90855c3d333d7963049ba00972fd6a02a0a69ac67c2bcb78070b3b17e62ad5f23e7a58f92354f57a6a
- SSDEEP 98304:Jp7Dp7Dp7Dp7Dp7mp7Dp7Dp7Dp7Dp7y7p6:vBBBB0BBBBJ
- TLSH T1EC467B10B7D18035F5B329728ABFE339552DB9714F6986CFE388062E5D70AE0A934727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_41c48e504f27ecf519394ffb78b33f13_elex_hawkeye_remcos_stop.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_41c48e504f27ecf519394ffb78b33f13_elex_hawkeye_remcos_stop.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_41c48e504f27ecf519394ffb78b33f13_elex_hawkeye_remcos_stop
- Size 5.3MB
- SHA256 75d038f9ba628d13bfdc72de82955ac867dcd4f450da7c4255c5e57ca7adf8bc
- MD5 41c48e504f27ecf519394ffb78b33f13
- SHA1 db23a99cebae294145d88132ab46204f671e42d0
- SHA512 53bd8c38d868bb0149d21f13f65a6984324633466249af90855c3d333d7963049ba00972fd6a02a0a69ac67c2bcb78070b3b17e62ad5f23e7a58f92354f57a6a
- SSDEEP 98304:Jp7Dp7Dp7Dp7Dp7mp7Dp7Dp7Dp7Dp7y7p6:vBBBB0BBBBJ
- TLSH T1EC467B10B7D18035F5B329728ABFE339552DB9714F6986CFE388062E5D70AE0A934727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1