General
- Target 2026-07-06_019d3852b96251592013b0eb9a763a0c_agent-tesla_backswap_elex_remcos_stop
- Size 875KB
- Sample260706-2t4f1sat2k
- SHA256 5dfdf46c554fb5a56875d063deedfc17d09e34a8b1ae8b0c1a8a552ab74aabf9
- MD5 019d3852b96251592013b0eb9a763a0c
- SHA1 e58dc25a83f5ad857517fbc30848994f892e9191
- SHA512 99eaf93099eae4de97f8312f912db42cce8ea73221f4244a8ea7ece4f6ca97c3cefe48ad8c043b2c82263a4726e0b7f5672540175fbf0cd80607e3885267d37d
- SSDEEP 12288:XaWzgMg7v3qnCiiErQohh0F4pCJ8lnyOQwlsZk0y8Fm7iGFRm:qaHMv6CCrjlnyOQ9q0y8FmuGm
- TLSH T18D15C012F7C680B6D99339B11A7BE32BEB3579194327C49BA7E03E739E211405B36361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_019d3852b96251592013b0eb9a763a0c_agent-tesla_backswap_elex_remcos_stop.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_019d3852b96251592013b0eb9a763a0c_agent-tesla_backswap_elex_remcos_stop.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_019d3852b96251592013b0eb9a763a0c_agent-tesla_backswap_elex_remcos_stop
- Size 875KB
- SHA256 5dfdf46c554fb5a56875d063deedfc17d09e34a8b1ae8b0c1a8a552ab74aabf9
- MD5 019d3852b96251592013b0eb9a763a0c
- SHA1 e58dc25a83f5ad857517fbc30848994f892e9191
- SHA512 99eaf93099eae4de97f8312f912db42cce8ea73221f4244a8ea7ece4f6ca97c3cefe48ad8c043b2c82263a4726e0b7f5672540175fbf0cd80607e3885267d37d
- SSDEEP 12288:XaWzgMg7v3qnCiiErQohh0F4pCJ8lnyOQwlsZk0y8Fm7iGFRm:qaHMv6CCrjlnyOQ9q0y8FmuGm
- TLSH T18D15C012F7C680B6D99339B11A7BE32BEB3579194327C49BA7E03E739E211405B36361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.