General
- Target 2026-09-04_58e907e88d03a90af0970c3298436dfc_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260905-l4y2aasblg
- SHA256 592fb5a83646eb349fc2343cf4a61fc092f6e6e85d32521d1961378b89d95af7
- MD5 58e907e88d03a90af0970c3298436dfc
- SHA1 bd5a588dfc2a5fa2acb35b61c97d007742b59426
- SHA512 fb82fea5a71c9eeac976cd0f934ecdf53a70b908e3948b3bacbd519a9d0472aa87e40892892c9c60e3a8f696d342d294bafcde95aa1ccdab04e18dcc8d611074
- SSDEEP 12288:9g49H6PWBIT5pAdLjFM+wq0wyqHsuP101U6vASOGfFFre9loNGMcUOU3QWj8htv/:u49H6uwp2juBSHsu2UhowloNLQWozSk
- TLSH T15935BF02B7F99134F6F31B31AFB492655A7ABC629D35C70E23D41A0D09B0980EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_58e907e88d03a90af0970c3298436dfc_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_58e907e88d03a90af0970c3298436dfc_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 592fb5a83646eb349fc2343cf4a61fc092f6e6e85d32521d1961378b89d95af7
- MD5 58e907e88d03a90af0970c3298436dfc
- SHA1 bd5a588dfc2a5fa2acb35b61c97d007742b59426
- SHA512 fb82fea5a71c9eeac976cd0f934ecdf53a70b908e3948b3bacbd519a9d0472aa87e40892892c9c60e3a8f696d342d294bafcde95aa1ccdab04e18dcc8d611074
- SSDEEP 12288:9g49H6PWBIT5pAdLjFM+wq0wyqHsuP101U6vASOGfFFre9loNGMcUOU3QWj8htv/:u49H6uwp2juBSHsu2UhowloNLQWozSk
- TLSH T15935BF02B7F99134F6F31B31AFB492655A7ABC629D35C70E23D41A0D09B0980EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1