General
- Target 2026-08-19_5211bf390945fa604da66375ce692c5c_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- Sample260819-2vcdxsvflb
- SHA256 024b300799c6f9899194ffb8a3992f4a420391d678e0eb6053e73a8ed3033fb4
- MD5 5211bf390945fa604da66375ce692c5c
- SHA1 db7de5b727b95dd659543d10f99003468e303c49
- SHA512 c624eff12f04617296944b67be9a2dabbbc3046eca86dfc823f2e3ed6a14da589b5f7ace56b8f2a68ce779e3d31d7b1d25dbca424e20401e94d7e868ad11a18f
- SSDEEP 6144:Ev9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFwRA:Eg49H61RgsNtbAd9
- TLSH T1E1A41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_5211bf390945fa604da66375ce692c5c_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_5211bf390945fa604da66375ce692c5c_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- SHA256 024b300799c6f9899194ffb8a3992f4a420391d678e0eb6053e73a8ed3033fb4
- MD5 5211bf390945fa604da66375ce692c5c
- SHA1 db7de5b727b95dd659543d10f99003468e303c49
- SHA512 c624eff12f04617296944b67be9a2dabbbc3046eca86dfc823f2e3ed6a14da589b5f7ace56b8f2a68ce779e3d31d7b1d25dbca424e20401e94d7e868ad11a18f
- SSDEEP 6144:Ev9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFwRA:Eg49H61RgsNtbAd9
- TLSH T1E1A41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.