General
- Target 2026-08-08_a04d37706cb2a8052514d39df2532e3e_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260808-dhyjmabd36
- SHA256 a5b003ba705f1fe5edbeb7ad83b45108ea2fcdfe097f212dd0dd34d0c59dd2de
- MD5 a04d37706cb2a8052514d39df2532e3e
- SHA1 959cad1b7532e2d49b98b26aedbbb6807d4a36ae
- SHA512 1b05e84736a97a0ea8f168495637486a4c124b0e7c75a8489d7955f93cdf34335e6ac9e28f4a83f3e9c0183d57c4c38a28993d3b65fb892dd33ac6127f30d7df
- SSDEEP 24576:k49H6n494I5K4R1itChwEaGNpktQWge4uP8V2EhYq:k4p6n49v5K4R1GCOE26W+2Eh
- TLSH T19835BF02B7F99034F2F31B31AFB552659A7BBD629D35C60E23C41A0D09B0990EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_a04d37706cb2a8052514d39df2532e3e_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_a04d37706cb2a8052514d39df2532e3e_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_a04d37706cb2a8052514d39df2532e3e_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 a5b003ba705f1fe5edbeb7ad83b45108ea2fcdfe097f212dd0dd34d0c59dd2de
- MD5 a04d37706cb2a8052514d39df2532e3e
- SHA1 959cad1b7532e2d49b98b26aedbbb6807d4a36ae
- SHA512 1b05e84736a97a0ea8f168495637486a4c124b0e7c75a8489d7955f93cdf34335e6ac9e28f4a83f3e9c0183d57c4c38a28993d3b65fb892dd33ac6127f30d7df
- SSDEEP 24576:k49H6n494I5K4R1itChwEaGNpktQWge4uP8V2EhYq:k4p6n49v5K4R1GCOE26W+2Eh
- TLSH T19835BF02B7F99034F2F31B31AFB552659A7BBD629D35C60E23C41A0D09B0990EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1