Analysis
- max time kernel
0s - max time network
1s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
13/11/2026, 01:44
Behavioral task
behavioral1
Sample
2026-11-12_6275e790f6e3b3948082054a21fb7e32_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-12_6275e790f6e3b3948082054a21fb7e32_bkransomware_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-11-12_6275e790f6e3b3948082054a21fb7e32_bkransomware_elex_hawkeye_maze_remcos.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-11-12_6275e790f6e3b3948082054a21fb7e32_bkransomware_elex_hawkeye_maze_remcos.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-11-12_6275e790f6e3b3948082054a21fb7e32_bkransomware_elex_hawkeye_maze_remcos.exe
- Size 2.2MB
- Sample261113-b59jasew21
- SHA256 2b404be2dd193e89a0d15ac047c3a87976b9ada0cbed056b109eafd68cc08587
- MD5 6275e790f6e3b3948082054a21fb7e32
- SHA1 18b2511a474026a9521da7b8561256a3469cbddf
- SHA512 a6473b5005124dccc801717f81b0ee2581a9fde59ec41bf6a21912cf96197e59828ba07bd83e147410a9df55bf236323a03394b934b5d1935c50b16bb8b2084c
- SSDEEP 24576:Uw9H6g+JKqQVgOEHKLhiPU/8/3RPg9XB0TE9UYr:Uwp6g+JKnVpEWU/3Rdo9UYr
- TLSH T141A5CF02B7E99174F2F32B31AF7552655ABABC729C35C60F23D4161D09B0A90EA34B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10