General
- Target 2026-08-08_09fd956a6ab4cccbaac666a6a5a048cf_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260808-erxt5azeqb
- SHA256 88de9618b92abfc554e1a8c11755cb4ce7e1ba8b010cd8fe2e1a18562eac2f32
- MD5 09fd956a6ab4cccbaac666a6a5a048cf
- SHA1 1562ca4b0d45c440e7fa0833cf5e3c5e8d682ee3
- SHA512 0a44bd143e0adc4b70625bb2b07b3463ffd083f935308c2550d7da6004988beb6e47c7bde018e14490cd8a17e88390946e738ceac2af3af49693c1b8ac9a0e2c
- SSDEEP 12288:Cg49H6awesNtyAdEOZHNLBTxSvaZMl3HrJJ6MqCTZKWbevCaQHpWKNsm0NF+xJR:R49H6zfy0pKhHrj1qCcWSRQHpSF+J
- TLSH T10535BE02B7E99034F2F31B31AFB552655A7BBD72AD35C60F2384161D09B0A80EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_09fd956a6ab4cccbaac666a6a5a048cf_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_09fd956a6ab4cccbaac666a6a5a048cf_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_09fd956a6ab4cccbaac666a6a5a048cf_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 88de9618b92abfc554e1a8c11755cb4ce7e1ba8b010cd8fe2e1a18562eac2f32
- MD5 09fd956a6ab4cccbaac666a6a5a048cf
- SHA1 1562ca4b0d45c440e7fa0833cf5e3c5e8d682ee3
- SHA512 0a44bd143e0adc4b70625bb2b07b3463ffd083f935308c2550d7da6004988beb6e47c7bde018e14490cd8a17e88390946e738ceac2af3af49693c1b8ac9a0e2c
- SSDEEP 12288:Cg49H6awesNtyAdEOZHNLBTxSvaZMl3HrJJ6MqCTZKWbevCaQHpWKNsm0NF+xJR:R49H6zfy0pKhHrj1qCcWSRQHpSF+J
- TLSH T10535BE02B7E99034F2F31B31AFB552655A7BBD72AD35C60F2384161D09B0A80EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1