General
- Target 2026-07-16_5598c35f10ddc51363f99691f41839a5_amadey_elex_mafia_remcos
- Size 999KB
- Sample260716-1a7hwset9p
- SHA256 afbbdbde0dc78dde199346e62cc91f23d54349f0e4c15cc931d0d679aee1862b
- MD5 5598c35f10ddc51363f99691f41839a5
- SHA1 c52a1a1a0b4244fadd98b416624f364124b52f0c
- SHA512 443361588877b06d7d01f2f771a249123600749dd82025a8e861264c6b0169f0d103e324171c2917ee5cf5c0e15f8611fd46651128d1dcc828845aae7d567b8c
- SSDEEP 24576:bNEHd0EKpxtJFt3uAmt89TMFZ2qrw+snco31mYRGZuWAiSFER4Wakeunq8:bNEHJKrtJFApt89TMn24En53LhWAhXUr
- TLSH T1F625F1257780D033C5770A368E56D3A8A5B9F5B188214007B7E49FBEBEB05C2EA35B47
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_5598c35f10ddc51363f99691f41839a5_amadey_elex_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_5598c35f10ddc51363f99691f41839a5_amadey_elex_mafia_remcos
- Size 999KB
- SHA256 afbbdbde0dc78dde199346e62cc91f23d54349f0e4c15cc931d0d679aee1862b
- MD5 5598c35f10ddc51363f99691f41839a5
- SHA1 c52a1a1a0b4244fadd98b416624f364124b52f0c
- SHA512 443361588877b06d7d01f2f771a249123600749dd82025a8e861264c6b0169f0d103e324171c2917ee5cf5c0e15f8611fd46651128d1dcc828845aae7d567b8c
- SSDEEP 24576:bNEHd0EKpxtJFt3uAmt89TMFZ2qrw+snco31mYRGZuWAiSFER4Wakeunq8:bNEHJKrtJFApt89TMn24En53LhWAhXUr
- TLSH T1F625F1257780D033C5770A368E56D3A8A5B9F5B188214007B7E49FBEBEB05C2EA35B47
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1