General
- Target 2026-08-30_e6e9c6c76fb57215402f93c49dc057a8_elex_maze_remcos
- Size 1.2MB
- Sample260831-cdwnsstcja
- SHA256 9426c5938e13f341996cf4e27b0a7971234497c55b3b46cabef4620364979d01
- MD5 e6e9c6c76fb57215402f93c49dc057a8
- SHA1 5d4de9c08600b4877133c17798c91d67af258de9
- SHA512 ff1d4ec5d7bc0bbd4b8a6a9091a77770f2eea4cc25a9e7b040f5d9ddb0c4012e6555b8a3305a3250bc80569c0daaad462bbd07e290a6302cd7160e8372be77f0
- SSDEEP 24576:N7GO7dtrjrICw9XuXo7beSTdt5xbX02uvfTXfBxrj3d5E/jKQvVj4YpdjYY0td7f:sEtnrICSooGSTD5xbX022fjBxrj3
- TLSH T120559D12BE8EE432C563013205F9A70195B878B13E36C16BBFD84A3CDD747816A6F667
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_e6e9c6c76fb57215402f93c49dc057a8_elex_maze_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_e6e9c6c76fb57215402f93c49dc057a8_elex_maze_remcos
- Size 1.2MB
- SHA256 9426c5938e13f341996cf4e27b0a7971234497c55b3b46cabef4620364979d01
- MD5 e6e9c6c76fb57215402f93c49dc057a8
- SHA1 5d4de9c08600b4877133c17798c91d67af258de9
- SHA512 ff1d4ec5d7bc0bbd4b8a6a9091a77770f2eea4cc25a9e7b040f5d9ddb0c4012e6555b8a3305a3250bc80569c0daaad462bbd07e290a6302cd7160e8372be77f0
- SSDEEP 24576:N7GO7dtrjrICw9XuXo7beSTdt5xbX02uvfTXfBxrj3d5E/jKQvVj4YpdjYY0td7f:sEtnrICSooGSTD5xbX022fjBxrj3
- TLSH T120559D12BE8EE432C563013205F9A70195B878B13E36C16BBFD84A3CDD747816A6F667
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1