General
- Target 2026-07-14_3f9927bd4a1cab387cced411f0722510_amadey_elex_mafia_remcos
- Size 999KB
- Sample260714-epb5msdz3m
- SHA256 3b94fb5eed89f26f37f5bf90b8d924ac4708498b3f3775274dd3384d8667af67
- MD5 3f9927bd4a1cab387cced411f0722510
- SHA1 a2c19fe7ec47715fbbaf1d8a3395185847265a1a
- SHA512 78fd6305feefdb81c3126a68093cc52a806143e1bc92fbebb111a03eda551a4bba0da84a3fa34ca3dfe609853c3196b4176f37fbac6aab769c754e415ed289a4
- SSDEEP 24576:bNEHd0EKpxtJFtC7vOn89TMFZ2qr1+snco31mYRGZuWAiSFER4Wakeunq8:bNEHJKrtJFu2n89TMn24nn53LhWAhXUr
- TLSH T1B925F1157780D033C5370A368E56D3A8A5B9F5B188218007B7E49FBEBEB05C2EA35B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_3f9927bd4a1cab387cced411f0722510_amadey_elex_mafia_remcos.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_3f9927bd4a1cab387cced411f0722510_amadey_elex_mafia_remcos.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_3f9927bd4a1cab387cced411f0722510_amadey_elex_mafia_remcos
- Size 999KB
- SHA256 3b94fb5eed89f26f37f5bf90b8d924ac4708498b3f3775274dd3384d8667af67
- MD5 3f9927bd4a1cab387cced411f0722510
- SHA1 a2c19fe7ec47715fbbaf1d8a3395185847265a1a
- SHA512 78fd6305feefdb81c3126a68093cc52a806143e1bc92fbebb111a03eda551a4bba0da84a3fa34ca3dfe609853c3196b4176f37fbac6aab769c754e415ed289a4
- SSDEEP 24576:bNEHd0EKpxtJFtC7vOn89TMFZ2qr1+snco31mYRGZuWAiSFER4Wakeunq8:bNEHJKrtJFu2n89TMn24nn53LhWAhXUr
- TLSH T1B925F1157780D033C5370A368E56D3A8A5B9F5B188218007B7E49FBEBEB05C2EA35B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1