General
- Target 2026-08-03_02f3a7c412c25e03bf968f1fea61a929_amadey_elex_mafia_remcos
- Size 999KB
- Sample260804-qg3s6sbd77
- SHA256 19eb9182921e947e3226ce55bf48787bcd74e3038e9bc0f92ce15dd65c5eb60b
- MD5 02f3a7c412c25e03bf968f1fea61a929
- SHA1 c20650ef94dddff01c86a2841e02bdf49e7886f1
- SHA512 80b6b9616c5b3c77bee2a492d868e9bb4be2c7aa421826b1128d904404ae678d991a5d4d097befe2ddd7b5da43aabbc01f2dd36ebc153cf658aedda43d123ac3
- SSDEEP 24576:BNEHd0EKpxtJFtS3s/t89TMFZ2qr90gH4Rz4ppQmJTwzFIbmqitQ:BNEHJKrtJFu0t89TMn24yDRzQXJTkFIB
- TLSH T19D25F1157784E072C47302398E56D7A4A5BAF5B08C214047B7E8AFBD7F701C2EA39B96
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_02f3a7c412c25e03bf968f1fea61a929_amadey_elex_mafia_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_02f3a7c412c25e03bf968f1fea61a929_amadey_elex_mafia_remcos
- Size 999KB
- SHA256 19eb9182921e947e3226ce55bf48787bcd74e3038e9bc0f92ce15dd65c5eb60b
- MD5 02f3a7c412c25e03bf968f1fea61a929
- SHA1 c20650ef94dddff01c86a2841e02bdf49e7886f1
- SHA512 80b6b9616c5b3c77bee2a492d868e9bb4be2c7aa421826b1128d904404ae678d991a5d4d097befe2ddd7b5da43aabbc01f2dd36ebc153cf658aedda43d123ac3
- SSDEEP 24576:BNEHd0EKpxtJFtS3s/t89TMFZ2qr90gH4Rz4ppQmJTwzFIbmqitQ:BNEHJKrtJFu0t89TMn24yDRzQXJTkFIB
- TLSH T19D25F1157784E072C47302398E56D7A4A5BAF5B08C214047B7E8AFBD7F701C2EA39B96
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1