General
- Target 2026-08-10_a0be96769e8037cf9ec29bad227acfea_amadey_elex_mafia_remcos_stonedrill
- Size 387KB
- Sample260810-w175wser4z
- SHA256 793375fd3b84bd36c985622005d0d6f03c67141dc7e28dc1e4320501051d1c96
Score
7/10
Malware Config
Targets
-
- Target 2026-08-10_a0be96769e8037cf9ec29bad227acfea_amadey_elex_mafia_remcos_stonedrill
- Size 387KB
- SHA256 793375fd3b84bd36c985622005d0d6f03c67141dc7e28dc1e4320501051d1c96
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1