General
- Target 2026-08-28_2a22155dde552038286861064f78ba74_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260828-ygzeraea58
- SHA256 35c521e6f07d9325e4775681e8e21d2009d0ccff93dafdf5da9b4115c294b85b
- MD5 2a22155dde552038286861064f78ba74
- SHA1 795e5089dda7092c1668ac1b18b12ebaf67b0ee9
- SHA512 e88aaa76708cd24224c1ce9611e331211f7f5d3cd10639118b56ef3d41b9436834d93e5ea24f2f7221e79caeb595f16656a13ea31f6e9e138251cd4a68febb96
- SSDEEP 12288:Cg49H6kenyN0LAdiYAhdPZUh4uUmZpM1j7+kU0I6S+1kxHBmO:R49H6/fLHBP2hLjU1jqnPH+1qHBm
- TLSH T10B35BE02B7E9A174F2F31B30AE7552654ABABD729D35C60F23C41A0D0DB0990EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_2a22155dde552038286861064f78ba74_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_2a22155dde552038286861064f78ba74_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_2a22155dde552038286861064f78ba74_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 35c521e6f07d9325e4775681e8e21d2009d0ccff93dafdf5da9b4115c294b85b
- MD5 2a22155dde552038286861064f78ba74
- SHA1 795e5089dda7092c1668ac1b18b12ebaf67b0ee9
- SHA512 e88aaa76708cd24224c1ce9611e331211f7f5d3cd10639118b56ef3d41b9436834d93e5ea24f2f7221e79caeb595f16656a13ea31f6e9e138251cd4a68febb96
- SSDEEP 12288:Cg49H6kenyN0LAdiYAhdPZUh4uUmZpM1j7+kU0I6S+1kxHBmO:R49H6/fLHBP2hLjU1jqnPH+1qHBm
- TLSH T10B35BE02B7E9A174F2F31B30AE7552654ABABD729D35C60F23C41A0D0DB0990EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1