General
- Target 2026-08-08_c6809022cabe3590c738f27b5609da0b_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260808-c87dsa1xhz
- SHA256 f79f6b86c707df7e552ae4af6762348e61b677e9c97f7323f7ed21d040bbca13
- MD5 c6809022cabe3590c738f27b5609da0b
- SHA1 83e3c8885dc3a7adf801c15d3ca04582bf4734b5
- SHA512 e40f163eed3ddb46a02a575d64aa7e3d2086a25686b40a86909c646418601f6afc2240a4585c58c28ff1a0ef9d1ca560b5fc355d3b28e3af2de38fcbc43b20b4
- SSDEEP 12288:Dg49H6P43sNeTAdBVR7leFbYdpuJ72bOD4UFeogBrqgeLf1EQFGInAG0B:k49H6wzTa7I7VD4UYBBru1TFGIn0B
- TLSH T10435BF02B7E9A134F1F31B31AFB992655A7BBC629D35C60E23D4160D1DB0980EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_c6809022cabe3590c738f27b5609da0b_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_c6809022cabe3590c738f27b5609da0b_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 f79f6b86c707df7e552ae4af6762348e61b677e9c97f7323f7ed21d040bbca13
- MD5 c6809022cabe3590c738f27b5609da0b
- SHA1 83e3c8885dc3a7adf801c15d3ca04582bf4734b5
- SHA512 e40f163eed3ddb46a02a575d64aa7e3d2086a25686b40a86909c646418601f6afc2240a4585c58c28ff1a0ef9d1ca560b5fc355d3b28e3af2de38fcbc43b20b4
- SSDEEP 12288:Dg49H6P43sNeTAdBVR7leFbYdpuJ72bOD4UFeogBrqgeLf1EQFGInAG0B:k49H6wzTa7I7VD4UYBBru1TFGIn0B
- TLSH T10435BF02B7E9A134F1F31B31AFB992655A7BBC629D35C60E23D4160D1DB0980EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1