General
- Target 2026-08-25_9bf40b8c88cefbbe984443c754839920_elex_hawkeye_remcos_vidar_wannacry
- Size 22.0MB
- Sample260826-tdpzpasalg
- SHA256 a605d9e0318ea394e716a9fc30f607ce0cb3aca8bd9c1f9e89a21f6273783ab8
- MD5 9bf40b8c88cefbbe984443c754839920
- SHA1 b3e98dca82d733a9569fcc974d0bed906a791256
- SHA512 4278735933bebbdb5f7810dc2f0b91e4ed528b60ff29a183695c1cfd6167dd1e2c73599530055616f843cb0e2c233906776471348693bc8e83264d473e23e333
- SSDEEP 98304:J7K7K7K7K7K7K7K7K777K7K7K7K7K7K7K7K7J7p0:S
- TLSH T1AE371909F98344B1D92B11B04CCBD3BF8A70BE218B128EEBF64DD75F6933B916428655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_9bf40b8c88cefbbe984443c754839920_elex_hawkeye_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_9bf40b8c88cefbbe984443c754839920_elex_hawkeye_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_9bf40b8c88cefbbe984443c754839920_elex_hawkeye_remcos_vidar_wannacry
- Size 22.0MB
- SHA256 a605d9e0318ea394e716a9fc30f607ce0cb3aca8bd9c1f9e89a21f6273783ab8
- MD5 9bf40b8c88cefbbe984443c754839920
- SHA1 b3e98dca82d733a9569fcc974d0bed906a791256
- SHA512 4278735933bebbdb5f7810dc2f0b91e4ed528b60ff29a183695c1cfd6167dd1e2c73599530055616f843cb0e2c233906776471348693bc8e83264d473e23e333
- SSDEEP 98304:J7K7K7K7K7K7K7K7K777K7K7K7K7K7K7K7K7J7p0:S
- TLSH T1AE371909F98344B1D92B11B04CCBD3BF8A70BE218B128EEBF64DD75F6933B916428655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1