General
- Target 2026-07-05_e2b978291a6487e4ed9999a7fcabf6a1_amadey_elex_mafia_remcos
- Size 1003KB
- Sample260705-bfjatabv7j
- SHA256 b701bf6f3d1c1f6622019a4ff4fe1c5afb51ee967f8b0043e155a06c129e6961
- MD5 e2b978291a6487e4ed9999a7fcabf6a1
- SHA1 720e3d9b51b9d521968c9c0baebce76a10066990
- SHA512 3764cb13b647163f93d80de1287ef2962dcc9a7b97e5af0d6ae4ac9f7006627b3c465b72eb313a4a8f342beb5731b3f54de145d67b106f3512c8bf3ed3e86c80
- SSDEEP 24576:rNEHd0EKpxtJFtY5sFr89TMFZ2qr6TpqHvDLLv9VbNNDQUFjc1y:rNEHJKrtJFamr89TMn246TpMvDLLzxNM
- TLSH T11325F116B780D037C57702364E56D7A8A6B9F5B158214007B7E8AFBE7F301D2AA35B83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_e2b978291a6487e4ed9999a7fcabf6a1_amadey_elex_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_e2b978291a6487e4ed9999a7fcabf6a1_amadey_elex_mafia_remcos.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_e2b978291a6487e4ed9999a7fcabf6a1_amadey_elex_mafia_remcos
- Size 1003KB
- SHA256 b701bf6f3d1c1f6622019a4ff4fe1c5afb51ee967f8b0043e155a06c129e6961
- MD5 e2b978291a6487e4ed9999a7fcabf6a1
- SHA1 720e3d9b51b9d521968c9c0baebce76a10066990
- SHA512 3764cb13b647163f93d80de1287ef2962dcc9a7b97e5af0d6ae4ac9f7006627b3c465b72eb313a4a8f342beb5731b3f54de145d67b106f3512c8bf3ed3e86c80
- SSDEEP 24576:rNEHd0EKpxtJFtY5sFr89TMFZ2qr6TpqHvDLLv9VbNNDQUFjc1y:rNEHJKrtJFamr89TMn246TpMvDLLzxNM
- TLSH T11325F116B780D037C57702364E56D7A8A6B9F5B158214007B7E8AFBE7F301D2AA35B83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1