General
- Target 2026-08-08_6cd73c529aec1175a158772d85a3f4b5_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260808-dy1zpabe27
- SHA256 5e8e381b2922e01539684e4a25418bb9d28c866af4dc823a2e48f4028082a0ac
- MD5 6cd73c529aec1175a158772d85a3f4b5
- SHA1 19dbb9e67b7a2c9c6d6d744f87346df705d6195c
- SHA512 7cad1886e6018c21a89c2d9d8a2db15fea7bc7906799d18ae0877038450e6c1212e43ee69f317fcf8387e6b9ebef9d588eddc73b8e1a61e6ba42a3d977534654
- SSDEEP 24576:k49H6D3nMK3zNf0lmRXrz8Upy7Rqm4UHMp2yujcZ:k4p6D3nMKOEFH8sy7RqmV1ye
- TLSH T1E035BF02B7E99175F2F31B31AFB592655ABABC629D35C60F23C4150D0DB0A80EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_6cd73c529aec1175a158772d85a3f4b5_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_6cd73c529aec1175a158772d85a3f4b5_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260710-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_6cd73c529aec1175a158772d85a3f4b5_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 5e8e381b2922e01539684e4a25418bb9d28c866af4dc823a2e48f4028082a0ac
- MD5 6cd73c529aec1175a158772d85a3f4b5
- SHA1 19dbb9e67b7a2c9c6d6d744f87346df705d6195c
- SHA512 7cad1886e6018c21a89c2d9d8a2db15fea7bc7906799d18ae0877038450e6c1212e43ee69f317fcf8387e6b9ebef9d588eddc73b8e1a61e6ba42a3d977534654
- SSDEEP 24576:k49H6D3nMK3zNf0lmRXrz8Upy7Rqm4UHMp2yujcZ:k4p6D3nMKOEFH8sy7RqmV1ye
- TLSH T1E035BF02B7E99175F2F31B31AFB592655ABABC629D35C60F23C4150D0DB0A80EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1