General
- Target 2026-09-16_211eb5f1615eb23b0081e9f41d370373_bkransomware_elex_hawkeye_maze_remcos
- Size 469KB
- Sample260916-hd5vcsweqf
- SHA256 4718da323fc26f1f51e71a4b3cc70c56c1600d0652fe0258c6a2d2848fb118d9
- MD5 211eb5f1615eb23b0081e9f41d370373
- SHA1 71de667078675770478b53cb60895b13f3df3470
- SHA512 023472254c844d38b8a1d3b22ff175bdc2461d837bf615e813f16a70e5b460829bd463fbb95312dda2ae8e83856bf359aadb2f0e111615f60e249f4a3d1c5285
- SSDEEP 6144:RoyZmTAsfJFakxaLjcMkc0Cax1P8Gp6bYA0w601+dNT9/0626ASkVOAFS4:RoyIJsMPrP5p6bYboEdNP
- TLSH T139A4190277E89135F2F31B31AEB992615A7ABC719D35D20F23D41A0D0DB0A90EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_211eb5f1615eb23b0081e9f41d370373_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_211eb5f1615eb23b0081e9f41d370373_bkransomware_elex_hawkeye_maze_remcos
- Size 469KB
- SHA256 4718da323fc26f1f51e71a4b3cc70c56c1600d0652fe0258c6a2d2848fb118d9
- MD5 211eb5f1615eb23b0081e9f41d370373
- SHA1 71de667078675770478b53cb60895b13f3df3470
- SHA512 023472254c844d38b8a1d3b22ff175bdc2461d837bf615e813f16a70e5b460829bd463fbb95312dda2ae8e83856bf359aadb2f0e111615f60e249f4a3d1c5285
- SSDEEP 6144:RoyZmTAsfJFakxaLjcMkc0Cax1P8Gp6bYA0w601+dNT9/0626ASkVOAFS4:RoyIJsMPrP5p6bYboEdNP
- TLSH T139A4190277E89135F2F31B31AEB992615A7ABC719D35D20F23D41A0D0DB0A90EA75B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.