General
- Target 2026-07-14_91424d6989cb058c397a430845cea110_amadey_elex_mafia_remcos
- Size 1003KB
- Sample260714-d2h82sdt9m
- SHA256 60a293732c8bacd8f31596854d2e67b84a47a0d1ff07f7f42aaf1ef27945404e
- MD5 91424d6989cb058c397a430845cea110
- SHA1 4afc3e1173840a6097f8b47f28a28da148c26dfa
- SHA512 32243eb1c6784c2dfb99f8622960e56f9d0405e5b9e871fbfc31005fe10669542f641724744a13a775aaadb51fe5d509c1ced16196e760ec77253ab06aefd172
- SSDEEP 24576:rNEHd0EKpxtJFtcfRhL89TMFZ2qrzpD3eBR8nvn9ZyXLYKM/s7q:rNEHJKrtJFQTL89TMn24zJOBR8nv9PU
- TLSH T18E25F1157780E033C53702358E15E7A965B9F9B198324007B7E9AF7D7E702C2EA39B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_91424d6989cb058c397a430845cea110_amadey_elex_mafia_remcos.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_91424d6989cb058c397a430845cea110_amadey_elex_mafia_remcos.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_91424d6989cb058c397a430845cea110_amadey_elex_mafia_remcos
- Size 1003KB
- SHA256 60a293732c8bacd8f31596854d2e67b84a47a0d1ff07f7f42aaf1ef27945404e
- MD5 91424d6989cb058c397a430845cea110
- SHA1 4afc3e1173840a6097f8b47f28a28da148c26dfa
- SHA512 32243eb1c6784c2dfb99f8622960e56f9d0405e5b9e871fbfc31005fe10669542f641724744a13a775aaadb51fe5d509c1ced16196e760ec77253ab06aefd172
- SSDEEP 24576:rNEHd0EKpxtJFtcfRhL89TMFZ2qrzpD3eBR8nvn9ZyXLYKM/s7q:rNEHJKrtJFQTL89TMn24zJOBR8nv9PU
- TLSH T18E25F1157780E033C53702358E15E7A965B9F9B198324007B7E9AF7D7E702C2EA39B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1