General
- Target 2026-06-01_799880c517b4ccdb15eb79c73452ec03_elex_mafia_remcos_stop
- Size 875KB
- Sample260601-vzydmac17p
- SHA256 a5db0c6e04c54d521e2dad829ff619de9cd6d0b5de27d221512abfdd1d71bc36
- MD5 799880c517b4ccdb15eb79c73452ec03
- SHA1 7f85030af8b44cf042177f692b0f503ee3493db6
- SHA512 f07eed1dce82688a2c52fafca67276d85bda2502b12e2f91eee6ae582e749551ee52fd7534a648e41fbbef4869ce55ab7e8c2419b109b41b39ffe081136ffc46
- SSDEEP 24576:BqMZH8HBp5zYxzTSFBfc5T0LdjQFdZ1wj:BTchpoz2F9cl0JjQ7Z1wj
- TLSH T1511518306BE540B1E3B216B3CDB49A159729FDD94B3590EBA9902C2B387E5C3D938713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-01_799880c517b4ccdb15eb79c73452ec03_elex_mafia_remcos_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-01_799880c517b4ccdb15eb79c73452ec03_elex_mafia_remcos_stop.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-01_799880c517b4ccdb15eb79c73452ec03_elex_mafia_remcos_stop
- Size 875KB
- SHA256 a5db0c6e04c54d521e2dad829ff619de9cd6d0b5de27d221512abfdd1d71bc36
- MD5 799880c517b4ccdb15eb79c73452ec03
- SHA1 7f85030af8b44cf042177f692b0f503ee3493db6
- SHA512 f07eed1dce82688a2c52fafca67276d85bda2502b12e2f91eee6ae582e749551ee52fd7534a648e41fbbef4869ce55ab7e8c2419b109b41b39ffe081136ffc46
- SSDEEP 24576:BqMZH8HBp5zYxzTSFBfc5T0LdjQFdZ1wj:BTchpoz2F9cl0JjQ7Z1wj
- TLSH T1511518306BE540B1E3B216B3CDB49A159729FDD94B3590EBA9902C2B387E5C3D938713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE