General
- Target 2026-04-15_76f3cd4b499ae6744359ad908b661a13_elex_mafia_nionspy_remcos
- Size 288KB
- Sample260415-m7anjacv2p
- SHA256 8a1193760391027da1bda7525431c2663dfc1378cfdb5897b1cc4aae74cddedd
- MD5 76f3cd4b499ae6744359ad908b661a13
- SHA1 6753f22c7baa6b851e408b11f2f7d827e78752c9
- SHA512 54852f1f28e4806a13a130201b3754824a0771fc0ddbb669781e8415f1777701434886f1eb5b119291a631b35d36a97fd2ff8eee39eed833154a2de8745994b2
- SSDEEP 6144:AQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:AQMyfmNFHfnWfhLZVHmOog
- TLSH T1A1549C107691C432C457267045AFABB64D793A752F36A6C3B7E01E69DE203E2EE3434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_76f3cd4b499ae6744359ad908b661a13_elex_mafia_nionspy_remcos.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_76f3cd4b499ae6744359ad908b661a13_elex_mafia_nionspy_remcos.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_76f3cd4b499ae6744359ad908b661a13_elex_mafia_nionspy_remcos
- Size 288KB
- SHA256 8a1193760391027da1bda7525431c2663dfc1378cfdb5897b1cc4aae74cddedd
- MD5 76f3cd4b499ae6744359ad908b661a13
- SHA1 6753f22c7baa6b851e408b11f2f7d827e78752c9
- SHA512 54852f1f28e4806a13a130201b3754824a0771fc0ddbb669781e8415f1777701434886f1eb5b119291a631b35d36a97fd2ff8eee39eed833154a2de8745994b2
- SSDEEP 6144:AQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:AQMyfmNFHfnWfhLZVHmOog
- TLSH T1A1549C107691C432C457267045AFABB64D793A752F36A6C3B7E01E69DE203E2EE3434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE