General
- Target 2026-08-06_33a357957d204b3897e681105165872e_amadey_elex_mafia_remcos
- Size 999KB
- Sample260806-b5tsva1crb
- SHA256 a66ff8c56d96145e9541b958a51d91f2c33aee15e21b274dfec15ed7936c580d
- MD5 33a357957d204b3897e681105165872e
- SHA1 e1576ee9402773b2b19085af7f451ba67354e25d
- SHA512 47a5552639364a0ece2a26e9795c4d6f1f2dfe8cd5946207e05bf81d1b0741bf0c58653b2de6e15f5b853a3db35d720b4114f190ba213ba5ac079cc29a263427
- SSDEEP 24576:BNEHd0EKpxtJFtvjXKn89TMFZ2qrT9rZ3P4JNmKHHOVsrZqLHdr:BNEHJKrtJF56n89TMn24P4JNduVY8dr
- TLSH T1BD25F115B780D033C47702368E56D7A8A6F9E5B198214107B7E8AFBE7F705C2DA39B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_33a357957d204b3897e681105165872e_amadey_elex_mafia_remcos.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_33a357957d204b3897e681105165872e_amadey_elex_mafia_remcos.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_33a357957d204b3897e681105165872e_amadey_elex_mafia_remcos
- Size 999KB
- SHA256 a66ff8c56d96145e9541b958a51d91f2c33aee15e21b274dfec15ed7936c580d
- MD5 33a357957d204b3897e681105165872e
- SHA1 e1576ee9402773b2b19085af7f451ba67354e25d
- SHA512 47a5552639364a0ece2a26e9795c4d6f1f2dfe8cd5946207e05bf81d1b0741bf0c58653b2de6e15f5b853a3db35d720b4114f190ba213ba5ac079cc29a263427
- SSDEEP 24576:BNEHd0EKpxtJFtvjXKn89TMFZ2qrT9rZ3P4JNmKHHOVsrZqLHdr:BNEHJKrtJF56n89TMn24P4JNduVY8dr
- TLSH T1BD25F115B780D033C47702368E56D7A8A6F9E5B198214107B7E8AFBE7F705C2DA39B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1