General
- Target 2026-08-16_5ee3b831611a9a00c3cc97098e6c39ab_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- Sample260816-e36w6szcma
- SHA256 c0bab9e194043882d5fac87a1e313aec967df6e929ac938344186e43da2f8495
- MD5 5ee3b831611a9a00c3cc97098e6c39ab
- SHA1 576f28e238c65294739742fba9b5a3db5e73a9f2
- SHA512 7b8bdef4cf1465cef068346e7d901ac9896c65f0270a0bf457c31add49512cdb65ca5483c0d399465c65d517a58d7cd2f5ae2b7ad54b52d4aadd25051e3fead1
- SSDEEP 6144:Lv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFoRA:Lg49H61RgsNtbAdF
- TLSH T1AFA41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_5ee3b831611a9a00c3cc97098e6c39ab_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_5ee3b831611a9a00c3cc97098e6c39ab_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- SHA256 c0bab9e194043882d5fac87a1e313aec967df6e929ac938344186e43da2f8495
- MD5 5ee3b831611a9a00c3cc97098e6c39ab
- SHA1 576f28e238c65294739742fba9b5a3db5e73a9f2
- SHA512 7b8bdef4cf1465cef068346e7d901ac9896c65f0270a0bf457c31add49512cdb65ca5483c0d399465c65d517a58d7cd2f5ae2b7ad54b52d4aadd25051e3fead1
- SSDEEP 6144:Lv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFoRA:Lg49H61RgsNtbAdF
- TLSH T1AFA41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.