General
- Target 2026-10-01_b5e2f16d269037bb8fe7bd81b549ef58_bkransomware_elex_hawkeye_maze_remcos
- Size 1011KB
- Sample261002-fr3aaaxare
- SHA256 20eea365304097866396b2404892f82c90ee4adef137a537fae0b03d005c3dff
- MD5 b5e2f16d269037bb8fe7bd81b549ef58
- SHA1 404b7cb3256f0b1891e4c3cf4c9325b5e2e5cca9
- SHA512 5844b54a968b5f6d3f3e4c41d4d36a681e920cd1013e2f0c79e738ac3fea7adf6a3f09e998207dbd7331e8486f97dd646244b1b7012c22450d47550755c1cf38
- SSDEEP 24576:5gVPrPSs+oEksqjnhMgeiCl7G0nehbGZpbD:5gljSlobDmg27RnWGj
- TLSH T1C025BE1273E89135F2F31B31AEB992655A7ABC729D35C20F23D4194D0DB0990EA79B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_b5e2f16d269037bb8fe7bd81b549ef58_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_b5e2f16d269037bb8fe7bd81b549ef58_bkransomware_elex_hawkeye_maze_remcos
- Size 1011KB
- SHA256 20eea365304097866396b2404892f82c90ee4adef137a537fae0b03d005c3dff
- MD5 b5e2f16d269037bb8fe7bd81b549ef58
- SHA1 404b7cb3256f0b1891e4c3cf4c9325b5e2e5cca9
- SHA512 5844b54a968b5f6d3f3e4c41d4d36a681e920cd1013e2f0c79e738ac3fea7adf6a3f09e998207dbd7331e8486f97dd646244b1b7012c22450d47550755c1cf38
- SSDEEP 24576:5gVPrPSs+oEksqjnhMgeiCl7G0nehbGZpbD:5gljSlobDmg27RnWGj
- TLSH T1C025BE1273E89135F2F31B31AEB992655A7ABC729D35C20F23D4194D0DB0990EA79B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1