General
- Target 2026-07-20_33a43b210a4be77b3d17c62d4fa6d9cb_coinminer_elex_mafia_remcos
- Size 1.3MB
- Sample260720-wjmgvsb15v
- SHA256 556c5cacdf862336a1849c4404b21f4c57bbc17905f35a03a83d7f80eeeaecd3
- MD5 33a43b210a4be77b3d17c62d4fa6d9cb
- SHA1 01a488ec72065138f32e3b6c92a182f198717389
- SHA512 287060edee41e2175cb0cf8de515761ee23aa3410c8621c4abd080965281bf6891906231958fe11f58caac68f1aef143353b0b653b9b2376bf44835fd8540a47
- SSDEEP 24576:PHmDvg1eg8lYLkpSFZmr8lcrNJZECOHUNt7nizsX4O8b8ITDnlq+YNpW4:PHmDvkRAuFkuoJZEtMFniQX4O8b8ITDc
- TLSH T1B0556D30F6428136E8E271B19E79AF5D6829A93007E640C772C917191F716F2EF3AB53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_33a43b210a4be77b3d17c62d4fa6d9cb_coinminer_elex_mafia_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_33a43b210a4be77b3d17c62d4fa6d9cb_coinminer_elex_mafia_remcos.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_33a43b210a4be77b3d17c62d4fa6d9cb_coinminer_elex_mafia_remcos
- Size 1.3MB
- SHA256 556c5cacdf862336a1849c4404b21f4c57bbc17905f35a03a83d7f80eeeaecd3
- MD5 33a43b210a4be77b3d17c62d4fa6d9cb
- SHA1 01a488ec72065138f32e3b6c92a182f198717389
- SHA512 287060edee41e2175cb0cf8de515761ee23aa3410c8621c4abd080965281bf6891906231958fe11f58caac68f1aef143353b0b653b9b2376bf44835fd8540a47
- SSDEEP 24576:PHmDvg1eg8lYLkpSFZmr8lcrNJZECOHUNt7nizsX4O8b8ITDnlq+YNpW4:PHmDvkRAuFkuoJZEtMFniQX4O8b8ITDc
- TLSH T1B0556D30F6428136E8E271B19E79AF5D6829A93007E640C772C917191F716F2EF3AB53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory