General
- Target 2026-11-04_91b29042facd8edfb5130b1d318b75bd_elex_hiddentear_remcos
- Size 208KB
- Sample261105-za94cadv3y
- SHA256 904aed1c2123d99c3ecc8496c02dd6460b1dd112703380014aa2f7fea1a6bbdc
- MD5 91b29042facd8edfb5130b1d318b75bd
- SHA1 d35d83bff8d3625295602e8acaf34b1e8ce761cc
- SHA512 ea240fc6d1e4199e33a34331b04949d5f7e9a94af3277e244415216284ef1d1fd738de2cd4d729fef9def5e6dacfc3ab2a9fb46cf132acdec71700aa4bb5644b
- SSDEEP 3072:0ooiM+lmsolAIrRuw+mqv9j1MWLQJMTmmsolNIrRuw+mqv9j1MWLQA:lI+lDAAnTmDAN
- TLSH T1722414F1A740C465D8A796B9883BDAA7A423A24DDC6C490D3D92FF0B7D723474027C9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-04_91b29042facd8edfb5130b1d318b75bd_elex_hiddentear_remcos.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-04_91b29042facd8edfb5130b1d318b75bd_elex_hiddentear_remcos.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-04_91b29042facd8edfb5130b1d318b75bd_elex_hiddentear_remcos
- Size 208KB
- SHA256 904aed1c2123d99c3ecc8496c02dd6460b1dd112703380014aa2f7fea1a6bbdc
- MD5 91b29042facd8edfb5130b1d318b75bd
- SHA1 d35d83bff8d3625295602e8acaf34b1e8ce761cc
- SHA512 ea240fc6d1e4199e33a34331b04949d5f7e9a94af3277e244415216284ef1d1fd738de2cd4d729fef9def5e6dacfc3ab2a9fb46cf132acdec71700aa4bb5644b
- SSDEEP 3072:0ooiM+lmsolAIrRuw+mqv9j1MWLQJMTmmsolNIrRuw+mqv9j1MWLQA:lI+lDAAnTmDAN
- TLSH T1722414F1A740C465D8A796B9883BDAA7A423A24DDC6C490D3D92FF0B7D723474027C9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects HiddenTear Ransomware
-
Family: HiddenTear, Cryptear
HiddenTear aka Cryptear is an open-source ransomware available on Github since 2015, with many versions in the wild.