General
- Target 2026-08-30_0940958e214341f603c7cd94bd11f703_elex_mafia_nionspy_remcos
- Size 288KB
- Sample260830-11alva1cqb
- SHA256 917b1d4a0eb870c8e8eb25cdc45700447f7f211d161c0752467139cfb3494d72
- MD5 0940958e214341f603c7cd94bd11f703
- SHA1 b0c2ee6e9a1f59cc242a76192ebbb36153964302
- SHA512 d232ed8e70be8ca4efa4b0e15906f158986e058b3834530a66ade432d45329893900732eaf3e1635cd0ec79d8e4b55f96c482e5cc026d6655c9a6e61c989aa88
- SSDEEP 6144:hQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:hQMyfmNFHfnWfhLZVHmOog
- TLSH T17C549C107691C432C457267045AFABB24D793A752F36A6C3B7E01E69DE203E2EE7434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_0940958e214341f603c7cd94bd11f703_elex_mafia_nionspy_remcos.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_0940958e214341f603c7cd94bd11f703_elex_mafia_nionspy_remcos.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_0940958e214341f603c7cd94bd11f703_elex_mafia_nionspy_remcos
- Size 288KB
- SHA256 917b1d4a0eb870c8e8eb25cdc45700447f7f211d161c0752467139cfb3494d72
- MD5 0940958e214341f603c7cd94bd11f703
- SHA1 b0c2ee6e9a1f59cc242a76192ebbb36153964302
- SHA512 d232ed8e70be8ca4efa4b0e15906f158986e058b3834530a66ade432d45329893900732eaf3e1635cd0ec79d8e4b55f96c482e5cc026d6655c9a6e61c989aa88
- SSDEEP 6144:hQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:hQMyfmNFHfnWfhLZVHmOog
- TLSH T17C549C107691C432C457267045AFABB24D793A752F36A6C3B7E01E69DE203E2EE7434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE