General
- Target 2026-08-21_858517a2ea546128c8275c61d0586a3f_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- Sample260822-ngjdesgm4z
- SHA256 59916289cc29dfe0ddf278cb46a14800ec3d37c74907729665881afb65770753
- MD5 858517a2ea546128c8275c61d0586a3f
- SHA1 f652f21ad32fa715be28c932a13c549eef79f3d5
- SHA512 3e966801c6186c6f0eb8d52c26d66950e486618a7c4a111330cc676f53ffd12a26792b415e7b570cc67ac86bfa60213164fabbd23dec793a6bed394a5e10d6a3
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvvt:/uTs1gBpQL5kmh0671o1CN
- TLSH T172841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_858517a2ea546128c8275c61d0586a3f_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_858517a2ea546128c8275c61d0586a3f_7ev3n_coinminer_elex_hawkeye_mespinoza.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_858517a2ea546128c8275c61d0586a3f_7ev3n_coinminer_elex_hawkeye_mespinoza
- Size 388KB
- SHA256 59916289cc29dfe0ddf278cb46a14800ec3d37c74907729665881afb65770753
- MD5 858517a2ea546128c8275c61d0586a3f
- SHA1 f652f21ad32fa715be28c932a13c549eef79f3d5
- SHA512 3e966801c6186c6f0eb8d52c26d66950e486618a7c4a111330cc676f53ffd12a26792b415e7b570cc67ac86bfa60213164fabbd23dec793a6bed394a5e10d6a3
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oHVCvvt:/uTs1gBpQL5kmh0671o1CN
- TLSH T172841926714198A6DD7268791A65BBFEAA2DB8704B940FF7F7C24AA404F03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Seven ransomware
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Adds Run key to start application