General
- Target 2026-08-10_dab43e5743f9e03869b7ee23a5fda017_elex_hawkeye_remcos_stop
- Size 5.3MB
- Sample260810-b9sfkshj5t
- SHA256 e064a9493b5d234c4d9081a97e638b9b6d958c897ba7395642ff9c006bf991f5
- MD5 dab43e5743f9e03869b7ee23a5fda017
- SHA1 e4d437b38a9d29752050531a0f6d41b26d08fba8
- SHA512 d4d48e7af2ed8456c85fe1e270f59cce2046b916f6cf3f6c0399502de1a06d72ba8d9120a406ee0c99f5fdd3fa2567197b979261cd45a3837afe8b671c609f95
- SSDEEP 98304:Jp7Dp7Dp7Dp7Dp7Xp7Dp7Dp7Dp7Dp717pc:vBBBB1BBBBs
- TLSH T10A467B10B7D18035F5B329728ABFE339552DB9714F6986CFE388062E5D70AE0A934727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_dab43e5743f9e03869b7ee23a5fda017_elex_hawkeye_remcos_stop.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_dab43e5743f9e03869b7ee23a5fda017_elex_hawkeye_remcos_stop.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_dab43e5743f9e03869b7ee23a5fda017_elex_hawkeye_remcos_stop
- Size 5.3MB
- SHA256 e064a9493b5d234c4d9081a97e638b9b6d958c897ba7395642ff9c006bf991f5
- MD5 dab43e5743f9e03869b7ee23a5fda017
- SHA1 e4d437b38a9d29752050531a0f6d41b26d08fba8
- SHA512 d4d48e7af2ed8456c85fe1e270f59cce2046b916f6cf3f6c0399502de1a06d72ba8d9120a406ee0c99f5fdd3fa2567197b979261cd45a3837afe8b671c609f95
- SSDEEP 98304:Jp7Dp7Dp7Dp7Dp7Xp7Dp7Dp7Dp7Dp717pc:vBBBB1BBBBs
- TLSH T10A467B10B7D18035F5B329728ABFE339552DB9714F6986CFE388062E5D70AE0A934727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1