General
- Target 2026-08-09_f37fc1a4f6d3fd223a738dcfc4a3de5d_elex_mafia_nionspy_remcos
- Size 288KB
- Sample260809-lnw7ravdre
- SHA256 5b5df19767fa2de0bb8f46f187bb9cb7d672f162894975dcd74ee43db09e0938
- MD5 f37fc1a4f6d3fd223a738dcfc4a3de5d
- SHA1 9317538cbfa3351c4031ea17de1472492b40a576
- SHA512 e29b6aa35eee0209f2cae486c8a1acb92a2f7f8dcf167e10b833486113f24c317b4e0e9e18fde1b1d79e8fc7618e0f598a80901eed9b6997b115338388197c28
- SSDEEP 6144:8Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:8QMyfmNFHfnWfhLZVHmOog
- TLSH T14F549C107691C432C457267045AFABB24D793A752F36A6C3B7E01E69DE203E2EE7434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_f37fc1a4f6d3fd223a738dcfc4a3de5d_elex_mafia_nionspy_remcos.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_f37fc1a4f6d3fd223a738dcfc4a3de5d_elex_mafia_nionspy_remcos.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_f37fc1a4f6d3fd223a738dcfc4a3de5d_elex_mafia_nionspy_remcos
- Size 288KB
- SHA256 5b5df19767fa2de0bb8f46f187bb9cb7d672f162894975dcd74ee43db09e0938
- MD5 f37fc1a4f6d3fd223a738dcfc4a3de5d
- SHA1 9317538cbfa3351c4031ea17de1472492b40a576
- SHA512 e29b6aa35eee0209f2cae486c8a1acb92a2f7f8dcf167e10b833486113f24c317b4e0e9e18fde1b1d79e8fc7618e0f598a80901eed9b6997b115338388197c28
- SSDEEP 6144:8Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:8QMyfmNFHfnWfhLZVHmOog
- TLSH T14F549C107691C432C457267045AFABB24D793A752F36A6C3B7E01E69DE203E2EE7434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE