General
- Target 2026-08-16_39a8c68fafdb2cec59edceaa4cc41e0c_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- Sample260816-feznmazelb
- SHA256 536a3149d47487951370904e6384ca2cb9e9987ed9949959de508650e6f143e1
- MD5 39a8c68fafdb2cec59edceaa4cc41e0c
- SHA1 c5629c13fc019eef74e1f8c986adf6790bda4d27
- SHA512 cc744dfeddb9b7efed6d253cb4eef4579e10a7e609a507f52650a2df80bb34b3041eb3f01d250ed307742dbfb80f2437278b2a1c27faf71798ad86a447610d45
- SSDEEP 6144:Gv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFJRA:Gg49H61RgsNtbAdk
- TLSH T192A41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_39a8c68fafdb2cec59edceaa4cc41e0c_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_39a8c68fafdb2cec59edceaa4cc41e0c_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- SHA256 536a3149d47487951370904e6384ca2cb9e9987ed9949959de508650e6f143e1
- MD5 39a8c68fafdb2cec59edceaa4cc41e0c
- SHA1 c5629c13fc019eef74e1f8c986adf6790bda4d27
- SHA512 cc744dfeddb9b7efed6d253cb4eef4579e10a7e609a507f52650a2df80bb34b3041eb3f01d250ed307742dbfb80f2437278b2a1c27faf71798ad86a447610d45
- SSDEEP 6144:Gv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFJRA:Gg49H61RgsNtbAdk
- TLSH T192A41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.