General
- Target 2026-09-04_ace0b76684222d5f3401ec12bed72b61_elex_mafia_nionspy_remcos
- Size 288KB
- Sample260905-awtk2sba97
- SHA256 d08baee7bc8d7e1266230dcdab0dad6ffe26cc3962ccf6a39bdb65e1cd11138d
- MD5 ace0b76684222d5f3401ec12bed72b61
- SHA1 acc96afc838309fcd9b58531f9ac85def111a531
- SHA512 cb7da053e3b25fbb03233f43da618f63c553df3c9f0c1d6b030f2b2e9d88803defbd5e9216ec01c3a930ab59e00c3a1054a97c5e98ba8652a4ee479671fb45d1
- SSDEEP 6144:3Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:3QMyfmNFHfnWfhLZVHmOog
- TLSH T130549C107691C432C457267045AFABB24D793A752F36A6C3B7E01E69DE203E2EE7434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_ace0b76684222d5f3401ec12bed72b61_elex_mafia_nionspy_remcos.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_ace0b76684222d5f3401ec12bed72b61_elex_mafia_nionspy_remcos.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_ace0b76684222d5f3401ec12bed72b61_elex_mafia_nionspy_remcos
- Size 288KB
- SHA256 d08baee7bc8d7e1266230dcdab0dad6ffe26cc3962ccf6a39bdb65e1cd11138d
- MD5 ace0b76684222d5f3401ec12bed72b61
- SHA1 acc96afc838309fcd9b58531f9ac85def111a531
- SHA512 cb7da053e3b25fbb03233f43da618f63c553df3c9f0c1d6b030f2b2e9d88803defbd5e9216ec01c3a930ab59e00c3a1054a97c5e98ba8652a4ee479671fb45d1
- SSDEEP 6144:3Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:3QMyfmNFHfnWfhLZVHmOog
- TLSH T130549C107691C432C457267045AFABB24D793A752F36A6C3B7E01E69DE203E2EE7434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE