General
- Target 2026-08-14_0964f4d5b9bf4bd1803585084f8fec61_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- Sample260814-19rxgssgnc
- SHA256 06839b98766670eaacc0461ef953083273ba2aef8259bd293bd9aa8784ad999d
- MD5 0964f4d5b9bf4bd1803585084f8fec61
- SHA1 007c00ce60760c97cc0a0bb79b7497d216817447
- SHA512 60b0798a8c519ac711a46278c7ff51be458cc8d661410bd76930e2a930964fffb61d14633fb948af9930130b2720b756eb098511a2716f9f6b0a3850a727fb85
- SSDEEP 6144:Hv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RF4RA:Hg49H61RgsNtbAd1
- TLSH T111A41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_0964f4d5b9bf4bd1803585084f8fec61_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_0964f4d5b9bf4bd1803585084f8fec61_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- SHA256 06839b98766670eaacc0461ef953083273ba2aef8259bd293bd9aa8784ad999d
- MD5 0964f4d5b9bf4bd1803585084f8fec61
- SHA1 007c00ce60760c97cc0a0bb79b7497d216817447
- SHA512 60b0798a8c519ac711a46278c7ff51be458cc8d661410bd76930e2a930964fffb61d14633fb948af9930130b2720b756eb098511a2716f9f6b0a3850a727fb85
- SSDEEP 6144:Hv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RF4RA:Hg49H61RgsNtbAd1
- TLSH T111A41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.