General
- Target 2026-07-20_a15813284c8a19471a04555d2ca70b18_elex_mafia_remcos_stop
- Size 983KB
- Sample260720-vr39xahs3n
- SHA256 30b4f15f8b1e4e19d89b7481d99b22ae30d45928b1e20fc267c07aba46b791d7
- MD5 a15813284c8a19471a04555d2ca70b18
- SHA1 e13f012812655ebbf9fb4f68b65a3d2335dde579
- SHA512 a8b272d74fd9a9bb7965c4b0f0b4b72439a65a8537a6f158a32cafb5a0f9c2737ef238f9090de6e83dff990531577a37a6a84fba4898b46985e0d237aa3b0209
- SSDEEP 24576:XH+t2Oz/z9W3lpCh2epZ4G4aDzRT0L2QI0ew:X4b83lY2epZFXN0qQI+
- TLSH T1E62529306BE541B4E3B6267299B49A159729FDD90B3590EFE6801C2F387E5C3D938323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_a15813284c8a19471a04555d2ca70b18_elex_mafia_remcos_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_a15813284c8a19471a04555d2ca70b18_elex_mafia_remcos_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_a15813284c8a19471a04555d2ca70b18_elex_mafia_remcos_stop
- Size 983KB
- SHA256 30b4f15f8b1e4e19d89b7481d99b22ae30d45928b1e20fc267c07aba46b791d7
- MD5 a15813284c8a19471a04555d2ca70b18
- SHA1 e13f012812655ebbf9fb4f68b65a3d2335dde579
- SHA512 a8b272d74fd9a9bb7965c4b0f0b4b72439a65a8537a6f158a32cafb5a0f9c2737ef238f9090de6e83dff990531577a37a6a84fba4898b46985e0d237aa3b0209
- SSDEEP 24576:XH+t2Oz/z9W3lpCh2epZ4G4aDzRT0L2QI0ew:X4b83lY2epZFXN0qQI+
- TLSH T1E62529306BE541B4E3B6267299B49A159729FDD90B3590EFE6801C2F387E5C3D938323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE