General
- Target 2026-09-01_33c5a27a09bd5aeb8a9152f31143ae28_elex_mafia_nionspy_remcos
- Size 288KB
- Sample260903-rag4kaycne
- SHA256 5e3c5b16d8162594653a303a0d270694aa32bc249df2b8e8ce6f90746eb79917
- MD5 33c5a27a09bd5aeb8a9152f31143ae28
- SHA1 0e1e912415fcc3de99ba61dafa7d975f4c4c8bb7
- SHA512 7fd66b2fdfcba4f6dc2913ea3c899f1046496118a66a72f8758ce767ad634f65af82c702ad37b86a98a8bcc8574db212030a39ae3b3353ded0eaf8077ab0fa75
- SSDEEP 6144:tQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:tQMyfmNFHfnWfhLZVHmOog
- TLSH T102549C107691C432C457267045AFABB24D793A752F36A6C3B7E01E69DE203E2EE7434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_33c5a27a09bd5aeb8a9152f31143ae28_elex_mafia_nionspy_remcos.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_33c5a27a09bd5aeb8a9152f31143ae28_elex_mafia_nionspy_remcos.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_33c5a27a09bd5aeb8a9152f31143ae28_elex_mafia_nionspy_remcos
- Size 288KB
- SHA256 5e3c5b16d8162594653a303a0d270694aa32bc249df2b8e8ce6f90746eb79917
- MD5 33c5a27a09bd5aeb8a9152f31143ae28
- SHA1 0e1e912415fcc3de99ba61dafa7d975f4c4c8bb7
- SHA512 7fd66b2fdfcba4f6dc2913ea3c899f1046496118a66a72f8758ce767ad634f65af82c702ad37b86a98a8bcc8574db212030a39ae3b3353ded0eaf8077ab0fa75
- SSDEEP 6144:tQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:tQMyfmNFHfnWfhLZVHmOog
- TLSH T102549C107691C432C457267045AFABB24D793A752F36A6C3B7E01E69DE203E2EE7434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE