General
- Target 2026-07-05_69c12a40bfc3ef635a8b49a49345814e_amadey_elex_mafia_remcos
- Size 1003KB
- Sample260705-byc7hsby9q
- SHA256 94f603088f15d30bfe4fcc5be27f8332adb57f2b953431899c7a209a78d27239
- MD5 69c12a40bfc3ef635a8b49a49345814e
- SHA1 f1c152ff865892dd63fc4d41ac1b25db1528226f
- SHA512 5b989cb69dfd546956a21e494bc13b4955be8e2d6da70a7a9bb7cb57861ecdcc7c40797a1e5b2d024183cd7132590d427176519adf09cc4c8cdf8dfe9d90d6ae
- SSDEEP 24576:rNEHd0EKpxtJFt/pWHk89TMFZ2qrKlnOHKVnrsaGBgW59tET9sq8mAw:rNEHJKrtJFXek89TMn24IOHK9rshP9tS
- TLSH T16425F1167784D036C57702368E56D7A8A5B9F5B14C210007B7E8AFBE3E702C3DA79B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_69c12a40bfc3ef635a8b49a49345814e_amadey_elex_mafia_remcos.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_69c12a40bfc3ef635a8b49a49345814e_amadey_elex_mafia_remcos
- Size 1003KB
- SHA256 94f603088f15d30bfe4fcc5be27f8332adb57f2b953431899c7a209a78d27239
- MD5 69c12a40bfc3ef635a8b49a49345814e
- SHA1 f1c152ff865892dd63fc4d41ac1b25db1528226f
- SHA512 5b989cb69dfd546956a21e494bc13b4955be8e2d6da70a7a9bb7cb57861ecdcc7c40797a1e5b2d024183cd7132590d427176519adf09cc4c8cdf8dfe9d90d6ae
- SSDEEP 24576:rNEHd0EKpxtJFt/pWHk89TMFZ2qrKlnOHKVnrsaGBgW59tET9sq8mAw:rNEHJKrtJFXek89TMn24IOHK9rshP9tS
- TLSH T16425F1167784D036C57702368E56D7A8A5B9F5B14C210007B7E8AFBE3E702C3DA79B86
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1