General
- Target 2026-08-27_77a4e430c4a7a7415b01479813eccac9_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- Sample260827-r2laaswfkh
- SHA256 600f34833b7db6feeac3097cdbc737783db951eef1071d1df507602fe9465dc1
- MD5 77a4e430c4a7a7415b01479813eccac9
- SHA1 766774f238dc58f4770c6676e0cdfbc4fc22706f
- SHA512 a68e36bde5e8000972b439d2953f65462306d7b237f86a6838da6b8688aa97998030af52ee7e41dd2b702671fc4686ba8b5b9f96ea8f8e62e7421bc55b44e05a
- SSDEEP 6144:tv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFwRA:tg49H61RgsNtbAd9
- TLSH T17CA41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_77a4e430c4a7a7415b01479813eccac9_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_77a4e430c4a7a7415b01479813eccac9_bkransomware_elex_hawkeye_maze_remcos
- Size 474KB
- SHA256 600f34833b7db6feeac3097cdbc737783db951eef1071d1df507602fe9465dc1
- MD5 77a4e430c4a7a7415b01479813eccac9
- SHA1 766774f238dc58f4770c6676e0cdfbc4fc22706f
- SHA512 a68e36bde5e8000972b439d2953f65462306d7b237f86a6838da6b8688aa97998030af52ee7e41dd2b702671fc4686ba8b5b9f96ea8f8e62e7421bc55b44e05a
- SSDEEP 6144:tv9/qzrnuGXBCzraOjHElFnRdOsNtns8ciWPbDm6N9RFwRA:tg49H61RgsNtbAd9
- TLSH T17CA41902B7E99134F2F31B31AFB592655A7ABD629D35C60F23D41A0D0DB0980EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.