General
- Target 2026-09-10_9d5422487511863619914d984e174e46_elex_hawkeye_remcos_vidar_wannacry
- Size 41.1MB
- Sample260910-p6el7scn6s
- SHA256 6a9ac4f37fc99005ae625e5b000da5ca6f0eece39ea08ad9182c11fbe875ac92
- MD5 9d5422487511863619914d984e174e46
- SHA1 199bf962cda7f8377bfb47d20e78574cf75e7af6
- SHA512 fb99b25fc978b081cf2664efe2cd1de62261ffc939a774f931072c51dddad56501137bf6ea5fdddbd7aa18b548e823db921d6dea0c7c8c5b82a5dd5ed3834f1c
- SSDEEP 98304:WK7K7K7K7K7K7K777K7K7K7K7K7K7K7K7cK7K7K7K7K7K7K777K7K7K7K7K7K7Kz:m
- TLSH T1D5972909F98344B1D92B11B04CCBD3BF8A70BE218B128EEBF64DD75F6933B916428655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-10_9d5422487511863619914d984e174e46_elex_hawkeye_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_9d5422487511863619914d984e174e46_elex_hawkeye_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_9d5422487511863619914d984e174e46_elex_hawkeye_remcos_vidar_wannacry
- Size 41.1MB
- SHA256 6a9ac4f37fc99005ae625e5b000da5ca6f0eece39ea08ad9182c11fbe875ac92
- MD5 9d5422487511863619914d984e174e46
- SHA1 199bf962cda7f8377bfb47d20e78574cf75e7af6
- SHA512 fb99b25fc978b081cf2664efe2cd1de62261ffc939a774f931072c51dddad56501137bf6ea5fdddbd7aa18b548e823db921d6dea0c7c8c5b82a5dd5ed3834f1c
- SSDEEP 98304:WK7K7K7K7K7K7K777K7K7K7K7K7K7K7K7cK7K7K7K7K7K7K777K7K7K7K7K7K7Kz:m
- TLSH T1D5972909F98344B1D92B11B04CCBD3BF8A70BE218B128EEBF64DD75F6933B916428655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1