General
- Target 2026-08-06_61917e4553b2a013d69a7d10a0f47e08_amadey_elex_mafia_remcos
- Size 999KB
- Sample260806-by1b2swvb1
- SHA256 f6cf91c8b2dd220b3ad555bd6089fac593ce597628ccaf5cbcd363cf9b67bf54
- MD5 61917e4553b2a013d69a7d10a0f47e08
- SHA1 671c047ae5c0398cd1f89f244829e621ab4d5fe8
- SHA512 06cc4d7f39174e8948186613ab04f459347bda5c0c3a5e896c847bb8481154741477f2b7b4dbbc3e84de96a8262866fceb7e3a70d45b184e7e9866a8ab2471c2
- SSDEEP 24576:bNEHd0EKpxtJFtDYgo289TMFZ2qrRI8cbWhVS6QFQmM7OlgcVP576z:bNEHJKrtJF6/289TMn24eBAE3MHcVha
- TLSH T11325F115B780D033C13702768E5AD3A9A5B9F5B188214507B7E89FBD7F705C2EA38B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_61917e4553b2a013d69a7d10a0f47e08_amadey_elex_mafia_remcos.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_61917e4553b2a013d69a7d10a0f47e08_amadey_elex_mafia_remcos
- Size 999KB
- SHA256 f6cf91c8b2dd220b3ad555bd6089fac593ce597628ccaf5cbcd363cf9b67bf54
- MD5 61917e4553b2a013d69a7d10a0f47e08
- SHA1 671c047ae5c0398cd1f89f244829e621ab4d5fe8
- SHA512 06cc4d7f39174e8948186613ab04f459347bda5c0c3a5e896c847bb8481154741477f2b7b4dbbc3e84de96a8262866fceb7e3a70d45b184e7e9866a8ab2471c2
- SSDEEP 24576:bNEHd0EKpxtJFtDYgo289TMFZ2qrRI8cbWhVS6QFQmM7OlgcVP576z:bNEHJKrtJF6/289TMn24eBAE3MHcVha
- TLSH T11325F115B780D033C13702768E5AD3A9A5B9F5B188214507B7E89FBD7F705C2EA38B86
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1