General
- Target 2026-08-27_1e347c8a73202b1a54775d41bcd0bacf_elex_hawkeye_remcos_vidar_wannacry
- Size 36.3MB
- Sample260827-1lel9abb56
- SHA256 8752f56ab41a27de122f2a792733820f1023e83efc152ce0aa0ff85c0ec4c5f7
- MD5 1e347c8a73202b1a54775d41bcd0bacf
- SHA1 8c40674177be8e9ecd20118e4e8d60f750ae865e
- SHA512 be144a21abef41a3d8bfb5de393d251c5c8717f48d90342f42cdc2612aee517adc2833e2c996e24ea8c6bb2ecaffb3472120e9ad9d10ed8308e39214aa5cbb73
- SSDEEP 98304:xK7K7K7K7K777K7K7K7K7K7K7K7K7jK7K7K7K7K777K7K7K7K7K7K7K7K7x7pP:R
- TLSH T17D872909F98344B1D92B11B04CCBD3BF8A70BE218B128EEBF64DD75F6933B916428655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-27_1e347c8a73202b1a54775d41bcd0bacf_elex_hawkeye_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_1e347c8a73202b1a54775d41bcd0bacf_elex_hawkeye_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_1e347c8a73202b1a54775d41bcd0bacf_elex_hawkeye_remcos_vidar_wannacry
- Size 36.3MB
- SHA256 8752f56ab41a27de122f2a792733820f1023e83efc152ce0aa0ff85c0ec4c5f7
- MD5 1e347c8a73202b1a54775d41bcd0bacf
- SHA1 8c40674177be8e9ecd20118e4e8d60f750ae865e
- SHA512 be144a21abef41a3d8bfb5de393d251c5c8717f48d90342f42cdc2612aee517adc2833e2c996e24ea8c6bb2ecaffb3472120e9ad9d10ed8308e39214aa5cbb73
- SSDEEP 98304:xK7K7K7K7K777K7K7K7K7K7K7K7K7jK7K7K7K7K777K7K7K7K7K7K7K7K7x7pP:R
- TLSH T17D872909F98344B1D92B11B04CCBD3BF8A70BE218B128EEBF64DD75F6933B916428655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1