General
- Target 2026-08-19_97cf2f70126e3d15f20a0a56679714af_elex_mafia_remcos
- Size 581KB
- Sample260819-scp3macq8t
- SHA256 6d1c3528247233e24b298d0fcf36744f64e6532e38ca30a86199b3d5b84c890b
- MD5 97cf2f70126e3d15f20a0a56679714af
- SHA1 31d92bfdb9755dd0f85231901c9c5f5c6a3f5098
- SHA512 fb2e4b34dc47577f3e145464644e5819b8ba5919285ea354fb6c480af46aa95547bd29a514cf9c13fe39e2333d7a626aab2a8bd307595838fc430cd6ea8cc679
- SSDEEP 12288:5zxVRwEkGNLVc/QlZLw9OPysUEVn4Xane2rF60nhBTFQaN1OrC9VGZVFi+Fe92Gn:5LRwEZNLVc/e2orFt6C3GZ++FK234xP7
- TLSH T146C46C207E749067D0A212789F3F979A166DB4788FF081C3B6EA0B5B1D6A5E14B33347
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_97cf2f70126e3d15f20a0a56679714af_elex_mafia_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_97cf2f70126e3d15f20a0a56679714af_elex_mafia_remcos
- Size 581KB
- SHA256 6d1c3528247233e24b298d0fcf36744f64e6532e38ca30a86199b3d5b84c890b
- MD5 97cf2f70126e3d15f20a0a56679714af
- SHA1 31d92bfdb9755dd0f85231901c9c5f5c6a3f5098
- SHA512 fb2e4b34dc47577f3e145464644e5819b8ba5919285ea354fb6c480af46aa95547bd29a514cf9c13fe39e2333d7a626aab2a8bd307595838fc430cd6ea8cc679
- SSDEEP 12288:5zxVRwEkGNLVc/QlZLw9OPysUEVn4Xane2rF60nhBTFQaN1OrC9VGZVFi+Fe92Gn:5LRwEZNLVc/e2orFt6C3GZ++FK234xP7
- TLSH T146C46C207E749067D0A212789F3F979A166DB4788FF081C3B6EA0B5B1D6A5E14B33347
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.