c187521bbe4d08ff2b0914c2fb452273c0b47bdc4e81d3594069f381b20fabe2

Analysis

max time kernel
150s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/08/2026, 12:59

Target
2026-08-21_6ff96ec57920eb22d7fc790fa78fdb57_elex_mafia_remcos.exe
Size 7.3MB
Sample260822-p8k7rsvbpc
SHA256 c187521bbe4d08ff2b0914c2fb452273c0b47bdc4e81d3594069f381b20fabe2
MD5 6ff96ec57920eb22d7fc790fa78fdb57
SHA1 cd2425eab4c9e8eeceb3fdb53f8fa33002967fc0
SHA512 21c2bf388ecf61015fb949ad3641888aa4f5d544a07f03c4c7b28c45e2854bcbee83649b0f4294d9d664365c9f64e6683d27e1b08517bd18f022a16feca7e91b
SSDEEP 3072:BxN3hlgx7Y0acIJqqLMgfv2qIn9Beci72QZIR/C3CR2/MZhAid1SYS9i/UxrzBUX:/N5VtYmv29zU2QZIyCRp7d1SYn6fjx
TLSH
T188769E1177A0D032C2674631DE89A7B9896D78317551A44BFBD06A6EBEF02C3DE34B0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5196	5044	WerFault.exe	88

C:\Users\Admin\AppData\Local\Temp\2026-08-21_6ff96ec57920eb22d7fc790fa78fdb57_elex_mafia_remcos.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-21_6ff96ec57920eb22d7fc790fa78fdb57_elex_mafia_remcos.exe"
1⤵
PID:5044
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5044 -s 92
  2⤵
  - Program crash
  PID:5196

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 5044 -ip 5044
1⤵
PID:4832