General
- Target 2026-09-04_640003759a438d7d9af385e726e0d9c8_amadey_elex_mafia_remcos
- Size 999KB
- Sample260905-kvh32ahn71
- SHA256 5956d7ce0997576169b4d2a83914d359d49b7c21c18fe4cb8af86a403850c981
- MD5 640003759a438d7d9af385e726e0d9c8
- SHA1 fa732194b1e0b0a8f56aebaafc06ab1f3de5be4f
- SHA512 2b09849d6795b1b6dd8af49bc24ce6b46a5dccb7ec9d894c9bc41da771b647d70f5a71f3e828c1c0ec18f2a89dd715388074ca2f08817812363238b7ad4fda03
- SSDEEP 24576:bNEHd0EKpxtJFtAkYJe89TMFZ2qrOPuEeqYtnLpSbZZp3iifIhx1aYx:bNEHJKrtJFr+e89TMn24OPVeVZpWbp5z
- TLSH T1AD25F126B780D033C53705364E5AD7E8A9B9F5B148214147BBE8AF7D7F701C29A35B82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_640003759a438d7d9af385e726e0d9c8_amadey_elex_mafia_remcos.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_640003759a438d7d9af385e726e0d9c8_amadey_elex_mafia_remcos
- Size 999KB
- SHA256 5956d7ce0997576169b4d2a83914d359d49b7c21c18fe4cb8af86a403850c981
- MD5 640003759a438d7d9af385e726e0d9c8
- SHA1 fa732194b1e0b0a8f56aebaafc06ab1f3de5be4f
- SHA512 2b09849d6795b1b6dd8af49bc24ce6b46a5dccb7ec9d894c9bc41da771b647d70f5a71f3e828c1c0ec18f2a89dd715388074ca2f08817812363238b7ad4fda03
- SSDEEP 24576:bNEHd0EKpxtJFtAkYJe89TMFZ2qrOPuEeqYtnLpSbZZp3iifIhx1aYx:bNEHJKrtJFr+e89TMn24OPVeVZpWbp5z
- TLSH T1AD25F126B780D033C53705364E5AD7E8A9B9F5B148214147BBE8AF7D7F701C29A35B82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1