General
- Target 2026-07-23_711df8b8dcd145471f75d69f6aeca56a_elex_mafia_remcos
- Size 1.7MB
- Sample260723-yj3j7atzft
- SHA256 035a6520c8ab203c14b7114b4c5938c804cd8dfbdd678ad7a534097748577f60
- MD5 711df8b8dcd145471f75d69f6aeca56a
- SHA1 6f18b9313b56dea2e8935f4d0aa15f3bbe32df9e
- SHA512 a06cd6db1c21b0f4ed15a2ba70bec456b12e6a9a7414165938691f64e6da9e89d08e2b321bc6466e7a99cdacc90076b5f6c5cc1ff39189613210a4767f2a07a1
- SSDEEP 24576:TcBgMNrPPjUEBfpTlCct3wGNyBo4kx929bL3Hnx:ggMNrwEBfpTEcOtB+kn3Hnx
- TLSH T1BC85F116BBB1C173C56711304CAAD36885B9B8710F3646D7B3E80B2E9EB07D2DB36256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_711df8b8dcd145471f75d69f6aeca56a_elex_mafia_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_711df8b8dcd145471f75d69f6aeca56a_elex_mafia_remcos
- Size 1.7MB
- SHA256 035a6520c8ab203c14b7114b4c5938c804cd8dfbdd678ad7a534097748577f60
- MD5 711df8b8dcd145471f75d69f6aeca56a
- SHA1 6f18b9313b56dea2e8935f4d0aa15f3bbe32df9e
- SHA512 a06cd6db1c21b0f4ed15a2ba70bec456b12e6a9a7414165938691f64e6da9e89d08e2b321bc6466e7a99cdacc90076b5f6c5cc1ff39189613210a4767f2a07a1
- SSDEEP 24576:TcBgMNrPPjUEBfpTlCct3wGNyBo4kx929bL3Hnx:ggMNrwEBfpTEcOtB+kn3Hnx
- TLSH T1BC85F116BBB1C173C56711304CAAD36885B9B8710F3646D7B3E80B2E9EB07D2DB36256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1