General
- Target 2026-08-18_b0292b6b6b386d4f884f89511cc074f0_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260818-nl9fea1flg
- SHA256 0ec3f1c815ac347a085e0cb6c78fb90cff2e41879d84f20b3b5727f9d1015d31
- MD5 b0292b6b6b386d4f884f89511cc074f0
- SHA1 bc7bb2a2f4dfc595a5fb96358c20707bf9e187cc
- SHA512 d9937429521ffcb844a2aac05d3a57d35016b4c506f2966d24173e6a9ff581f0916a4a45a6a0a5aa4549a0924e4d2bb6050a99cd5600b21e8893b27fbeb52df1
- SSDEEP 12288:Cg49H6X1axNUaAdcnY2ZtoyscptJQX1OeBEvtGvBl7YiUCTDzXtOpe5+:R49H6lTaVnY2ZpbHiX1Oe4Gv/76CXzw
- TLSH T10C35BF02B7E99134F1F32B31AF7592654A7BBC62AD35C60E23D41A0D4DB0980EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_b0292b6b6b386d4f884f89511cc074f0_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_b0292b6b6b386d4f884f89511cc074f0_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_b0292b6b6b386d4f884f89511cc074f0_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 0ec3f1c815ac347a085e0cb6c78fb90cff2e41879d84f20b3b5727f9d1015d31
- MD5 b0292b6b6b386d4f884f89511cc074f0
- SHA1 bc7bb2a2f4dfc595a5fb96358c20707bf9e187cc
- SHA512 d9937429521ffcb844a2aac05d3a57d35016b4c506f2966d24173e6a9ff581f0916a4a45a6a0a5aa4549a0924e4d2bb6050a99cd5600b21e8893b27fbeb52df1
- SSDEEP 12288:Cg49H6X1axNUaAdcnY2ZtoyscptJQX1OeBEvtGvBl7YiUCTDzXtOpe5+:R49H6lTaVnY2ZpbHiX1Oe4Gv/76CXzw
- TLSH T10C35BF02B7E99134F1F32B31AF7592654A7BBC62AD35C60E23D41A0D4DB0980EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1