General
- Target 2026-09-05_6c3a1108f53ad491490c470065120ce9_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- Sample260907-xeef5aag23
- SHA256 30e31e012ba7f9790fb8ca4178670f7a490fe341738ae74bd21aaae94a3c6061
- MD5 6c3a1108f53ad491490c470065120ce9
- SHA1 b340eb85dc2426eb5dc60dbd750d5ca7386f59d6
- SHA512 434ee644dc8a817a1356b407c312cd9952f56b9e422070e93e2349fd8cb875cdea65eb27f383bda01e64697ebc26531d19b5a73a8fcf18528c3bf50a80ccc3d1
- SSDEEP 12288:sg49H6gGNnNZvAdNugKXFvMUr6rNLCnwmKyOHyqhiCP/HmmGKYNRaUqM9y9:749H6PxvMuv1n6rYnXqjfm7KwRaUqP9
- TLSH T1BE35BF02B3E99074F2F31B31AFB552655ABABD629D35C60F23C4190D0DB0A90EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_6c3a1108f53ad491490c470065120ce9_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_6c3a1108f53ad491490c470065120ce9_bkransomware_elex_hawkeye_maze_remcos
- Size 1.0MB
- SHA256 30e31e012ba7f9790fb8ca4178670f7a490fe341738ae74bd21aaae94a3c6061
- MD5 6c3a1108f53ad491490c470065120ce9
- SHA1 b340eb85dc2426eb5dc60dbd750d5ca7386f59d6
- SHA512 434ee644dc8a817a1356b407c312cd9952f56b9e422070e93e2349fd8cb875cdea65eb27f383bda01e64697ebc26531d19b5a73a8fcf18528c3bf50a80ccc3d1
- SSDEEP 12288:sg49H6gGNnNZvAdNugKXFvMUr6rNLCnwmKyOHyqhiCP/HmmGKYNRaUqM9y9:749H6PxvMuv1n6rYnXqjfm7KwRaUqP9
- TLSH T1BE35BF02B3E99074F2F31B31AFB552655ABABD629D35C60F23C4190D0DB0A90EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1