General
- Target 2026-08-19_f3652f228a282d4cd6c3309dd12a8321_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260819-vdaqfaycnd
- SHA256 06764f59187dcdbfee4537ee9c6d781ff17762b62f23b8637fff625446605fba
- MD5 f3652f228a282d4cd6c3309dd12a8321
- SHA1 58a735533c5afd172d2f3da3afd9430b6ca740a6
- SHA512 3ca34bb9cc2573d4a01de9a810df8366125865c24b887b11e092a9b0d5eb08dc49e0d54057ec67773453309569ebe7d147893dd327c59253020fe703e70fe3a4
- SSDEEP 24576:749H6z7VoSzEfscJ4t7Oy5bYXUT3fPQn1:74p6z7VoSzE0cJ4pvbYGfe
- TLSH T15735CF02B7E99134F2F31B31AFB992655A7ABC629C35C60F23D4190D4D70A90EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_f3652f228a282d4cd6c3309dd12a8321_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_f3652f228a282d4cd6c3309dd12a8321_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 06764f59187dcdbfee4537ee9c6d781ff17762b62f23b8637fff625446605fba
- MD5 f3652f228a282d4cd6c3309dd12a8321
- SHA1 58a735533c5afd172d2f3da3afd9430b6ca740a6
- SHA512 3ca34bb9cc2573d4a01de9a810df8366125865c24b887b11e092a9b0d5eb08dc49e0d54057ec67773453309569ebe7d147893dd327c59253020fe703e70fe3a4
- SSDEEP 24576:749H6z7VoSzEfscJ4t7Oy5bYXUT3fPQn1:74p6z7VoSzE0cJ4pvbYGfe
- TLSH T15735CF02B7E99134F2F31B31AFB992655A7ABC629C35C60F23D4190D4D70A90EA35B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1