General
- Target 2026-07-22_3995f9b15b8a14ae4d9d48d239407c9d_elex_mafia_remcos_stop
- Size 981KB
- Sample260723-aen91abk61
- SHA256 ee4c119349d10b6309ac6b2c0f26b7b047afe42909809f5208587085731fc6ef
- MD5 3995f9b15b8a14ae4d9d48d239407c9d
- SHA1 26de646d7540ef5b9a82314c6f3f14d264c69193
- SHA512 f02a9036b826bfeb420e6daf468d2e4635bdc6533c9bdd22a13da2dd7d606caa015d5f71ddce97dad09d099f969bf6a9966c9b9e3d68404ccf353942be32d898
- SSDEEP 24576:0H+t2Oz/z9W3lpCh2epZ4G4aDzRT0L2QI0e6:+4b83lY2epZFXN0qQII
- TLSH T1C12529306BE541B4E3B6267299B49A159729FDD90B3590EFE6801C2F387E5C3D938323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_3995f9b15b8a14ae4d9d48d239407c9d_elex_mafia_remcos_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_3995f9b15b8a14ae4d9d48d239407c9d_elex_mafia_remcos_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_3995f9b15b8a14ae4d9d48d239407c9d_elex_mafia_remcos_stop
- Size 981KB
- SHA256 ee4c119349d10b6309ac6b2c0f26b7b047afe42909809f5208587085731fc6ef
- MD5 3995f9b15b8a14ae4d9d48d239407c9d
- SHA1 26de646d7540ef5b9a82314c6f3f14d264c69193
- SHA512 f02a9036b826bfeb420e6daf468d2e4635bdc6533c9bdd22a13da2dd7d606caa015d5f71ddce97dad09d099f969bf6a9966c9b9e3d68404ccf353942be32d898
- SSDEEP 24576:0H+t2Oz/z9W3lpCh2epZ4G4aDzRT0L2QI0e6:+4b83lY2epZFXN0qQII
- TLSH T1C12529306BE541B4E3B6267299B49A159729FDD90B3590EFE6801C2F387E5C3D938323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE