General
- Target 2026-08-16_70b529b553fa8fa9a621d82afd0341c5_elex_manuscrypt_mespinoza_remcos
- Size 1.5MB
- Sample260816-wbpx1seh65
- SHA256 4465ab07a4d404143ffd9faf88cc4d73df22443f921416b0edf128941fdf3810
- MD5 70b529b553fa8fa9a621d82afd0341c5
- SHA1 912ee56b3e8391ad88cbdfbc1c5c5c15d6ab00f0
- SHA512 a69b52cfe63a370011a34de11c11bd001ab6c59b2ac6246b071d326489489b79b1201b35c6633efc1ce8e22e67d934df13f07524fd5758dbe8bc1ccc84451162
- SSDEEP 24576:le13AxOPgXe4i7ojhsP5Lgrk1TWb4AN5:o13AxXe30jaNf1TWbdz
- TLSH T1F0753B667A08D1D7F71C987AD48C8B6267601DBACF561032F0E9BABF013EAB05E5513C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_70b529b553fa8fa9a621d82afd0341c5_elex_manuscrypt_mespinoza_remcos.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_70b529b553fa8fa9a621d82afd0341c5_elex_manuscrypt_mespinoza_remcos
- Size 1.5MB
- SHA256 4465ab07a4d404143ffd9faf88cc4d73df22443f921416b0edf128941fdf3810
- MD5 70b529b553fa8fa9a621d82afd0341c5
- SHA1 912ee56b3e8391ad88cbdfbc1c5c5c15d6ab00f0
- SHA512 a69b52cfe63a370011a34de11c11bd001ab6c59b2ac6246b071d326489489b79b1201b35c6633efc1ce8e22e67d934df13f07524fd5758dbe8bc1ccc84451162
- SSDEEP 24576:le13AxOPgXe4i7ojhsP5Lgrk1TWb4AN5:o13AxXe30jaNf1TWbdz
- TLSH T1F0753B667A08D1D7F71C987AD48C8B6267601DBACF561032F0E9BABF013EAB05E5513C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1