General
- Target 2026-08-15_468030ba64e136a7a7cd94d17dc44c70_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- Sample260815-rn9ezayang
- SHA256 2d4adb9464d8ba635766d9b1a412349e67258e6017d83b8de8cf9b25408be9cf
- MD5 468030ba64e136a7a7cd94d17dc44c70
- SHA1 908e4fea3eee7bbaf48d27058397deb464d4f875
- SHA512 777f0fb412cd604d16052d52d6a387212f7ee8e17afeb7b0c4a09e27e6207058d106d888123f2f98663ed8eb5dd5ecbeacf0f5c0732e94772ee71b7fa02e3a6e
- SSDEEP 6144:yv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFQ9RA:yg49H61RgsNtbAdL
- TLSH T1AAA41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_468030ba64e136a7a7cd94d17dc44c70_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_468030ba64e136a7a7cd94d17dc44c70_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- SHA256 2d4adb9464d8ba635766d9b1a412349e67258e6017d83b8de8cf9b25408be9cf
- MD5 468030ba64e136a7a7cd94d17dc44c70
- SHA1 908e4fea3eee7bbaf48d27058397deb464d4f875
- SHA512 777f0fb412cd604d16052d52d6a387212f7ee8e17afeb7b0c4a09e27e6207058d106d888123f2f98663ed8eb5dd5ecbeacf0f5c0732e94772ee71b7fa02e3a6e
- SSDEEP 6144:yv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFQ9RA:yg49H61RgsNtbAdL
- TLSH T1AAA41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.