General
- Target 2026-08-16_59c54786623e4f6e7737c6d052a408f2_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260816-e5pqnsdj4w
- SHA256 64561a9d48ae98dffc32b782e8094b25fe0770bd417104933abae5d18be6de46
- MD5 59c54786623e4f6e7737c6d052a408f2
- SHA1 b3fc9494ae9f2ea5b9ab87709b53da9a0a79b03b
- SHA512 d30d65f63dd5f9d5281cec49de03f9874206f212dd203fb504c9413265abd88fe01a265eb76b9a8d799d5e9a4eba41880e8c810afb2dc015d6a7ca57ad2c9f93
- SSDEEP 24576:R49H6uXGtVDB3Jw8QkVO+GftQuksrqLsN:R4p6uXGthBCD/fxkAqy
- TLSH T19935BE12B7F99134F2F31B31AFB592655A7ABD629D35C60E23C41A0D0DB0980EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_59c54786623e4f6e7737c6d052a408f2_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_59c54786623e4f6e7737c6d052a408f2_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_59c54786623e4f6e7737c6d052a408f2_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 64561a9d48ae98dffc32b782e8094b25fe0770bd417104933abae5d18be6de46
- MD5 59c54786623e4f6e7737c6d052a408f2
- SHA1 b3fc9494ae9f2ea5b9ab87709b53da9a0a79b03b
- SHA512 d30d65f63dd5f9d5281cec49de03f9874206f212dd203fb504c9413265abd88fe01a265eb76b9a8d799d5e9a4eba41880e8c810afb2dc015d6a7ca57ad2c9f93
- SSDEEP 24576:R49H6uXGtVDB3Jw8QkVO+GftQuksrqLsN:R4p6uXGthBCD/fxkAqy
- TLSH T19935BE12B7F99134F2F31B31AFB592655A7ABD629D35C60E23C41A0D0DB0980EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1