General
- Target 2026-09-04_349d946c876047625652d13aae6cb09d_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260905-rw92gattdv
- SHA256 2e63526995a2125929f983923dd888759f40e37a6eccffe860a548955821f4f2
- MD5 349d946c876047625652d13aae6cb09d
- SHA1 6522e4860870a44d64fea3e47c8907a79700a98a
- SHA512 2cc7186ffcb37f6059901e759c9778a284e9ddbbc2587f72a0928e040e61097b40c8c76a0854c50195ceb4dac91e333a22759f87df4fc74f943b206567613aad
- SSDEEP 12288:Dg49H6XWhKa5FAdtSsKUMe2sVXHP1EPx7FKAVpLhmbLRk59S5mmUTcfYk3:k49H6mZFtdUMrSXHYnVpFmbdk59SSTo
- TLSH T19635BE02B3E99134F2F31B31AFB992555A7ABD72AD35C60E23D4190D0DB0990EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_349d946c876047625652d13aae6cb09d_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_349d946c876047625652d13aae6cb09d_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_349d946c876047625652d13aae6cb09d_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 2e63526995a2125929f983923dd888759f40e37a6eccffe860a548955821f4f2
- MD5 349d946c876047625652d13aae6cb09d
- SHA1 6522e4860870a44d64fea3e47c8907a79700a98a
- SHA512 2cc7186ffcb37f6059901e759c9778a284e9ddbbc2587f72a0928e040e61097b40c8c76a0854c50195ceb4dac91e333a22759f87df4fc74f943b206567613aad
- SSDEEP 12288:Dg49H6XWhKa5FAdtSsKUMe2sVXHP1EPx7FKAVpLhmbLRk59S5mmUTcfYk3:k49H6mZFtdUMrSXHYnVpFmbdk59SSTo
- TLSH T19635BE02B3E99134F2F31B31AFB992555A7ABD72AD35C60E23D4190D0DB0990EA74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1