General
- Target 2026-09-04_4c3ab3f914cf3a56656d78f650043ffe_amadey_elex_mafia_remcos
- Size 1003KB
- Sample260905-nnmpeszyew
- SHA256 b676cf482a048f18c2df69ece973dc1ca00182b6677f1cee9797f85ff80fb210
- MD5 4c3ab3f914cf3a56656d78f650043ffe
- SHA1 a9d61a0586ab338918004328025a71320b2e4c0d
- SHA512 5cc854b47b742a23200d745a8129addec3c879e8a64013f8ed80146bef44d8f8baa42817de7f55773f334025e34aff4351c98ac9d5f89e23f3d44ceaf8000607
- SSDEEP 24576:rNEHd0EKpxtJFtPx3VX89TMFZ2qrAHzgeSyftk15N+Q3XRCMWmpE31W95Ga:rNEHJKrtJFLlX89TMn24Azgcftk1DRI8
- TLSH T10225F1157780D033D17302368E55D3A8AABAF5B148254007F7E4AFBE7F701D2AA39B96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_4c3ab3f914cf3a56656d78f650043ffe_amadey_elex_mafia_remcos.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_4c3ab3f914cf3a56656d78f650043ffe_amadey_elex_mafia_remcos
- Size 1003KB
- SHA256 b676cf482a048f18c2df69ece973dc1ca00182b6677f1cee9797f85ff80fb210
- MD5 4c3ab3f914cf3a56656d78f650043ffe
- SHA1 a9d61a0586ab338918004328025a71320b2e4c0d
- SHA512 5cc854b47b742a23200d745a8129addec3c879e8a64013f8ed80146bef44d8f8baa42817de7f55773f334025e34aff4351c98ac9d5f89e23f3d44ceaf8000607
- SSDEEP 24576:rNEHd0EKpxtJFtPx3VX89TMFZ2qrAHzgeSyftk15N+Q3XRCMWmpE31W95Ga:rNEHJKrtJFLlX89TMn24Azgcftk1DRI8
- TLSH T10225F1157780D033D17302368E55D3A8AABAF5B148254007F7E4AFBE7F701D2AA39B96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1