General
- Target 2026-08-23_ff2a1cc7cdd7b93afc47eed96b214f7e_elex_mafia_remcos
- Size 301KB
- Sample260823-rd1ebastdy
- SHA256 da48892335940717dbde6b5134723ba6915ba8cfc8439f79cba8c06fe648ca3e
- MD5 ff2a1cc7cdd7b93afc47eed96b214f7e
- SHA1 a24a104974c73fc4efd2e15e277995f4854feb18
- SHA512 94e8f22cdd752dc981518074065a5d73b6591d9c16f5029d2fa4be95cc303d606e26198d3c2a17de76484a7f48546cc2a15b89da38ccd42f3f7ddea8ae3df7e1
- SSDEEP 3072:M+uzH1cL1txOMXRcujYdxb3lTsjaqiUNDKquIbLhsL33ZAaFop5nP/kOuYsQ1u6S:PcHqFsd7TEz87IXWZA1nHrsSuTbRPf
- TLSH T1F3648D2A6710D072D6630531EB4967718DB9BC316924740BFBD05AAAADF03D2DE34B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-23_ff2a1cc7cdd7b93afc47eed96b214f7e_elex_mafia_remcos.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
1
Botnet
-
9
Attributes
-
profile_id
9
Targets
-
- Target 2026-08-23_ff2a1cc7cdd7b93afc47eed96b214f7e_elex_mafia_remcos
- Size 301KB
- SHA256 da48892335940717dbde6b5134723ba6915ba8cfc8439f79cba8c06fe648ca3e
- MD5 ff2a1cc7cdd7b93afc47eed96b214f7e
- SHA1 a24a104974c73fc4efd2e15e277995f4854feb18
- SHA512 94e8f22cdd752dc981518074065a5d73b6591d9c16f5029d2fa4be95cc303d606e26198d3c2a17de76484a7f48546cc2a15b89da38ccd42f3f7ddea8ae3df7e1
- SSDEEP 3072:M+uzH1cL1txOMXRcujYdxb3lTsjaqiUNDKquIbLhsL33ZAaFop5nP/kOuYsQ1u6S:PcHqFsd7TEz87IXWZA1nHrsSuTbRPf
- TLSH T1F3648D2A6710D072D6630531EB4967718DB9BC316924740BFBD05AAAADF03D2DE34B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Vidar Stealer