General
- Target 2026-07-20_866e08e0a52c85686ade9cd763411078_elex_mafia_remcos_stop
- Size 983KB
- Sample260720-xyvmfset5s
- SHA256 1b0123934df74ba5f03fdcc3c97a6a364d5381367d6c6c93f68b4a3dc9907e48
- MD5 866e08e0a52c85686ade9cd763411078
- SHA1 8ce7cda0fadd81ced86d364c6139f75aa79ccefd
- SHA512 67e0d25634a3431847783b6fb15594f157d5b9d7a466009ea09b3aadde7001d4ec7d4b5c66280541361c8fc0d77024e22c92a6eb6b460c11a80d4b8b256f3d6d
- SSDEEP 24576:XH+t2Oz/z9W3lpCh2epZ4G4aDzRT0L2QI0ek:X4b83lY2epZFXN0qQIC
- TLSH T1132529306BE541B4E3B6267299B49A159729FDD90B3590EFE6801C2F387E5C3D938323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_866e08e0a52c85686ade9cd763411078_elex_mafia_remcos_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_866e08e0a52c85686ade9cd763411078_elex_mafia_remcos_stop.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_866e08e0a52c85686ade9cd763411078_elex_mafia_remcos_stop
- Size 983KB
- SHA256 1b0123934df74ba5f03fdcc3c97a6a364d5381367d6c6c93f68b4a3dc9907e48
- MD5 866e08e0a52c85686ade9cd763411078
- SHA1 8ce7cda0fadd81ced86d364c6139f75aa79ccefd
- SHA512 67e0d25634a3431847783b6fb15594f157d5b9d7a466009ea09b3aadde7001d4ec7d4b5c66280541361c8fc0d77024e22c92a6eb6b460c11a80d4b8b256f3d6d
- SSDEEP 24576:XH+t2Oz/z9W3lpCh2epZ4G4aDzRT0L2QI0ek:X4b83lY2epZFXN0qQIC
- TLSH T1132529306BE541B4E3B6267299B49A159729FDD90B3590EFE6801C2F387E5C3D938323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE