General
- Target 2026-08-30_189346effebb3f0bd31552ae976878a5_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260830-zzhemahp6v
- SHA256 994e44a9857b6d05827865f26965e6ea002b22f4f70297a695e852c80ceb8a2f
- MD5 189346effebb3f0bd31552ae976878a5
- SHA1 38721d19f567c5d97a0ec2adabbcc3f3dd8d6494
- SHA512 7956dd4b7814ce8a0f71e12b57f7e58915cb933aadc9d7fba35a7b0b4d15abf165cf6b724a3446fde9dca9b89c53aa927dac86b22084bc9d5b6be4f1dae83ad0
- SSDEEP 24576:749H64SgkT7eqjBFhd5QTZ6fnvCJYiLMnHl6Wz1:74p64SgkZjBFhdsZw8up
- TLSH T10535BF02B7F99134F1F31B31AFB992658A7ABC62AD35D60E23C4150D0DB0990EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_189346effebb3f0bd31552ae976878a5_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_189346effebb3f0bd31552ae976878a5_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 994e44a9857b6d05827865f26965e6ea002b22f4f70297a695e852c80ceb8a2f
- MD5 189346effebb3f0bd31552ae976878a5
- SHA1 38721d19f567c5d97a0ec2adabbcc3f3dd8d6494
- SHA512 7956dd4b7814ce8a0f71e12b57f7e58915cb933aadc9d7fba35a7b0b4d15abf165cf6b724a3446fde9dca9b89c53aa927dac86b22084bc9d5b6be4f1dae83ad0
- SSDEEP 24576:749H64SgkT7eqjBFhd5QTZ6fnvCJYiLMnHl6Wz1:74p64SgkZjBFhdsZw8up
- TLSH T10535BF02B7F99134F1F31B31AFB992658A7ABC62AD35D60E23C4150D0DB0990EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1