General
- Target 2026-08-16_b06d2cca2c43dc5222876a21f27a9a8d_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- Sample260816-ef831sygnh
- SHA256 2f0b3eecd2db6119d7171588ee9d74835b2a51e5f93b60d7643b5bb1863b9a67
- MD5 b06d2cca2c43dc5222876a21f27a9a8d
- SHA1 8d85dbd947a997f7d19c724dc54b1889f57d6f76
- SHA512 a9610fcfb8cb85cf5e124d272786dd90d14584464138d70b0f732da4f105a773a64d3e586ef14fbd60a60f56624b02ad251385ade48bf70f8bda0992e1502375
- SSDEEP 6144:vv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFyRA:vg49H61RgsNtbAdX
- TLSH T101A41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_b06d2cca2c43dc5222876a21f27a9a8d_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_b06d2cca2c43dc5222876a21f27a9a8d_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- SHA256 2f0b3eecd2db6119d7171588ee9d74835b2a51e5f93b60d7643b5bb1863b9a67
- MD5 b06d2cca2c43dc5222876a21f27a9a8d
- SHA1 8d85dbd947a997f7d19c724dc54b1889f57d6f76
- SHA512 a9610fcfb8cb85cf5e124d272786dd90d14584464138d70b0f732da4f105a773a64d3e586ef14fbd60a60f56624b02ad251385ade48bf70f8bda0992e1502375
- SSDEEP 6144:vv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFyRA:vg49H61RgsNtbAdX
- TLSH T101A41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.