General
- Target 2026-09-05_7b4eaf59fe3f0921743169015310c9b9_elex_mafia_nionspy_remcos
- Size 288KB
- Sample260907-tmx2nahg99
- SHA256 6157d1130ce97d534756942d99e87f448cd0af2462423bacbbc6efe9c1b84271
- MD5 7b4eaf59fe3f0921743169015310c9b9
- SHA1 d0d02d7abfd001bb71fc12ae76caed1abb87edce
- SHA512 b0bca754b3c4475a42bd07622fe01ebc8e293c4d743a680c8ba371dcb259d42c4430f629b01b04da5dc84fbd63aa91b41dd94861a973f2610f7c23f4086f538c
- SSDEEP 6144:XQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:XQMyfmNFHfnWfhLZVHmOog
- TLSH T161549C107691C432C457267045AFABB24D793A752F36A6C3B7E01E69DE203E2EE7434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_7b4eaf59fe3f0921743169015310c9b9_elex_mafia_nionspy_remcos.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_7b4eaf59fe3f0921743169015310c9b9_elex_mafia_nionspy_remcos.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_7b4eaf59fe3f0921743169015310c9b9_elex_mafia_nionspy_remcos
- Size 288KB
- SHA256 6157d1130ce97d534756942d99e87f448cd0af2462423bacbbc6efe9c1b84271
- MD5 7b4eaf59fe3f0921743169015310c9b9
- SHA1 d0d02d7abfd001bb71fc12ae76caed1abb87edce
- SHA512 b0bca754b3c4475a42bd07622fe01ebc8e293c4d743a680c8ba371dcb259d42c4430f629b01b04da5dc84fbd63aa91b41dd94861a973f2610f7c23f4086f538c
- SSDEEP 6144:XQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:XQMyfmNFHfnWfhLZVHmOog
- TLSH T161549C107691C432C457267045AFABB24D793A752F36A6C3B7E01E69DE203E2EE7434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE