General
- Target 2026-11-07_d3557b3150ff5eaebfbc9284b84073d5_elex_hiddentear_remcos
- Size 209KB
- Sample261108-ggd1daat8k
- SHA256 1f90571da4f1af4da190508802d78806e86408e29fceffd3a291e15256bafb66
- MD5 d3557b3150ff5eaebfbc9284b84073d5
- SHA1 ddabf49e35cb64fc84416236feccdb809636994c
- SHA512 f43e20e140cfb7d36f84ba701a3a9408105ad6d2edcef42991a63756ea2878156bf0a77a362d7bcc831658735c012c5f20ac99744c1e79f821daa6ae357e3ccd
- SSDEEP 3072:kiWttxM+lmsolAIrRuw+mqv9j1MWLQJMTmmsolNIrRuw+mqv9j1MWLQL:kiWq+lDAALTmDAN
- TLSH T1332415F1A740C465D8A796B9883BDAA7A423A24DDC6C490D3D92FF0B7D723474027C9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-07_d3557b3150ff5eaebfbc9284b84073d5_elex_hiddentear_remcos.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-07_d3557b3150ff5eaebfbc9284b84073d5_elex_hiddentear_remcos.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-07_d3557b3150ff5eaebfbc9284b84073d5_elex_hiddentear_remcos
- Size 209KB
- SHA256 1f90571da4f1af4da190508802d78806e86408e29fceffd3a291e15256bafb66
- MD5 d3557b3150ff5eaebfbc9284b84073d5
- SHA1 ddabf49e35cb64fc84416236feccdb809636994c
- SHA512 f43e20e140cfb7d36f84ba701a3a9408105ad6d2edcef42991a63756ea2878156bf0a77a362d7bcc831658735c012c5f20ac99744c1e79f821daa6ae357e3ccd
- SSDEEP 3072:kiWttxM+lmsolAIrRuw+mqv9j1MWLQJMTmmsolNIrRuw+mqv9j1MWLQL:kiWq+lDAALTmDAN
- TLSH T1332415F1A740C465D8A796B9883BDAA7A423A24DDC6C490D3D92FF0B7D723474027C9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects HiddenTear Ransomware
Family: HiddenTear, Cryptear
HiddenTear aka Cryptear is an open-source ransomware available on Github since 2015, with many versions in the wild.