General
- Target 2026-07-20_9cf12545dabe2fd08a47f5d9176490f9_coinminer_elex_mafia_remcos
- Size 1.3MB
- Sample260720-vtaelshs7p
- SHA256 9b26fdc182f1fa4da882fb90bcec17bd4543f578582519cf9858a7098eeb35cc
- MD5 9cf12545dabe2fd08a47f5d9176490f9
- SHA1 56eb77364ca3c18147220f3b0a855188090325ee
- SHA512 187212dd70e5f2d75fe3f02c7acc8f48d2785bb5c46c1e9f9f7ed9b455b83186adfd6221a3b0cf50fde6ce630ddf854dddf27d2c804694f158a6b95b3897fc0b
- SSDEEP 24576:fHmDvg1eg8lYLkpSFZmr8lcrNJZECOHUNt7nizsX4O8b8ITDnlq+Y1EAs:fHmDvkRAuFkuoJZEtMFniQX4O8b8ITDj
- TLSH T132556D30F6428136E8E271B18E79AF5D6829A93007E640C772D917191F716F2EF3AB53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_9cf12545dabe2fd08a47f5d9176490f9_coinminer_elex_mafia_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_9cf12545dabe2fd08a47f5d9176490f9_coinminer_elex_mafia_remcos.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_9cf12545dabe2fd08a47f5d9176490f9_coinminer_elex_mafia_remcos
- Size 1.3MB
- SHA256 9b26fdc182f1fa4da882fb90bcec17bd4543f578582519cf9858a7098eeb35cc
- MD5 9cf12545dabe2fd08a47f5d9176490f9
- SHA1 56eb77364ca3c18147220f3b0a855188090325ee
- SHA512 187212dd70e5f2d75fe3f02c7acc8f48d2785bb5c46c1e9f9f7ed9b455b83186adfd6221a3b0cf50fde6ce630ddf854dddf27d2c804694f158a6b95b3897fc0b
- SSDEEP 24576:fHmDvg1eg8lYLkpSFZmr8lcrNJZECOHUNt7nizsX4O8b8ITDnlq+Y1EAs:fHmDvkRAuFkuoJZEtMFniQX4O8b8ITDj
- TLSH T132556D30F6428136E8E271B18E79AF5D6829A93007E640C772D917191F716F2EF3AB53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory