General
- Target 2026-08-03_1d193043bc7084501a730c085e169e81_amadey_elex_mafia_remcos
- Size 999KB
- Sample260804-p38e4sbb94
- SHA256 4984a30641fbcbe9e2115fa44f1504f5a3f193087d5d41dcb95402c38c159355
- MD5 1d193043bc7084501a730c085e169e81
- SHA1 97c1f71651bcdf94cac797deb3c710847f773f00
- SHA512 d28cb52f5872ae1d558f68c04af5b607da810f5123abc035093738ad5aeffb72d9d128280cd13d90105dc4793879f0f7e59fce33084a9bac6836dd82e1322571
- SSDEEP 24576:bNEHd0EKpxtJFtS7iOB89TMFZ2qrdT7Jckdwi6i9bNrqq4E41WFpW3oRos:bNEHJKrtJF67B89TMn24N7Jckdwi3N7u
- TLSH T1E125F119B784D033C17302358F5AD3A8A5B9F5B158214107B7E8AFBD7E742C2AA39F46
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_1d193043bc7084501a730c085e169e81_amadey_elex_mafia_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_1d193043bc7084501a730c085e169e81_amadey_elex_mafia_remcos
- Size 999KB
- SHA256 4984a30641fbcbe9e2115fa44f1504f5a3f193087d5d41dcb95402c38c159355
- MD5 1d193043bc7084501a730c085e169e81
- SHA1 97c1f71651bcdf94cac797deb3c710847f773f00
- SHA512 d28cb52f5872ae1d558f68c04af5b607da810f5123abc035093738ad5aeffb72d9d128280cd13d90105dc4793879f0f7e59fce33084a9bac6836dd82e1322571
- SSDEEP 24576:bNEHd0EKpxtJFtS7iOB89TMFZ2qrdT7Jckdwi6i9bNrqq4E41WFpW3oRos:bNEHJKrtJF67B89TMn24N7Jckdwi3N7u
- TLSH T1E125F119B784D033C17302358F5AD3A8A5B9F5B158214107B7E8AFBD7E742C2AA39F46
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1