General
- Target 2026-10-04_53bded140b7b20419cf44e32416580c3_7ev3n_elex_hawkeye_mespinoza
- Size 363KB
- Sample261005-rdy69avbpf
- SHA256 9b50b5f93f7eb65f346764a329997a55bbbdf58b20a5c3815611d69dd56d7a1b
- MD5 53bded140b7b20419cf44e32416580c3
- SHA1 44ffbacc424834bce8154eacd0073062b30c5836
- SHA512 92371a454537a714e0fb5c925e89d896ae67d1fc5d01eff5e45beaed6d463bd075bde3281fdb449ccef1b434f67eee52346b0d7d71fca31fd6a08c03b0e25b36
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oj:/uTs1gBpQL5kmh0671oj
- TLSH T18C840826B14198E6DD7268791A65BBFEAA2DB4704B940FF7F7C24AA404E03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-04_53bded140b7b20419cf44e32416580c3_7ev3n_elex_hawkeye_mespinoza.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-04_53bded140b7b20419cf44e32416580c3_7ev3n_elex_hawkeye_mespinoza.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-04_53bded140b7b20419cf44e32416580c3_7ev3n_elex_hawkeye_mespinoza
- Size 363KB
- SHA256 9b50b5f93f7eb65f346764a329997a55bbbdf58b20a5c3815611d69dd56d7a1b
- MD5 53bded140b7b20419cf44e32416580c3
- SHA1 44ffbacc424834bce8154eacd0073062b30c5836
- SHA512 92371a454537a714e0fb5c925e89d896ae67d1fc5d01eff5e45beaed6d463bd075bde3281fdb449ccef1b434f67eee52346b0d7d71fca31fd6a08c03b0e25b36
- SSDEEP 6144:/aPIWVeTdJKsLxgcSNDQL5Q9VuwLmh0kdH371oj:/uTs1gBpQL5kmh0671oj
- TLSH T18C840826B14198E6DD7268791A65BBFEAA2DB4704B940FF7F7C24AA404E03C11B74F13
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Seven ransomware
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1