General
- Target 2026-07-17_349e2b548d3191bb0ce9a295225c2dae_coinminer_elex_mafia_remcos
- Size 1.3MB
- Sample260718-exs35af19n
- SHA256 b85a2121b93b313e864e54edc214b367f94225e187ae1d5869262868054f7330
- MD5 349e2b548d3191bb0ce9a295225c2dae
- SHA1 e4f30436f570a467a2c805e85d7df505c215411f
- SHA512 c6df89c9bd78f41d5e165c2dc8c951fe14338bec2d4d78cbe9487d72ce822499e95ab031f9df8031dad3f77dd78e218fe13f3682c7b5508f3f31ba16c327471e
- SSDEEP 24576:mHmDvg1eg8lYLkpSFZmr8lcrNJZECOHUNt7nizsX4O8b8ITDnlq+Ym:mHmDvkRAuFkuoJZEtMFniQX4O8b8ITDr
- TLSH T10F556C30F6428136E8E271B18E79AF5D6829A93007E640C772D917191F716F2EF3AB53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_349e2b548d3191bb0ce9a295225c2dae_coinminer_elex_mafia_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_349e2b548d3191bb0ce9a295225c2dae_coinminer_elex_mafia_remcos.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_349e2b548d3191bb0ce9a295225c2dae_coinminer_elex_mafia_remcos
- Size 1.3MB
- SHA256 b85a2121b93b313e864e54edc214b367f94225e187ae1d5869262868054f7330
- MD5 349e2b548d3191bb0ce9a295225c2dae
- SHA1 e4f30436f570a467a2c805e85d7df505c215411f
- SHA512 c6df89c9bd78f41d5e165c2dc8c951fe14338bec2d4d78cbe9487d72ce822499e95ab031f9df8031dad3f77dd78e218fe13f3682c7b5508f3f31ba16c327471e
- SSDEEP 24576:mHmDvg1eg8lYLkpSFZmr8lcrNJZECOHUNt7nizsX4O8b8ITDnlq+Ym:mHmDvkRAuFkuoJZEtMFniQX4O8b8ITDr
- TLSH T10F556C30F6428136E8E271B18E79AF5D6829A93007E640C772D917191F716F2EF3AB53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory