General
- Target 2026-08-24_deac83ddbe01fb42900f6eb50be517c0_amadey_elex_mafia_remcos_stonedrill
- Size 387KB
- Sample260824-2jslrsvbpe
- SHA256 2fe23aaaf1953183a1a6c4021b00bc9be358863c1ae0fffb18fdb8f806cc530a
Score
7/10
Malware Config
Targets
-
- Target 2026-08-24_deac83ddbe01fb42900f6eb50be517c0_amadey_elex_mafia_remcos_stonedrill
- Size 387KB
- SHA256 2fe23aaaf1953183a1a6c4021b00bc9be358863c1ae0fffb18fdb8f806cc530a
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1