General
- Target 2026-09-19_84c85b63b57f22898c42dd7503adfcfb_amadey_elex_mafia_remcos_stonedrill
- Size 387KB
- Sample260919-hd6rnahn51
- SHA256 cdc158ce6ee8161cb5573058622a1e800e4e4d918368d1015580585ee5e913f9
Score
7/10
Malware Config
Targets
-
- Target 2026-09-19_84c85b63b57f22898c42dd7503adfcfb_amadey_elex_mafia_remcos_stonedrill
- Size 387KB
- SHA256 cdc158ce6ee8161cb5573058622a1e800e4e4d918368d1015580585ee5e913f9
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1