General
- Target 2026-10-08_5cd320e2d5f1bf93abe629b1abd5e734_elex_mafia_nionspy_remcos
- Size 280KB
- Sample261009-q5587sys7q
- SHA256 ec37a4e3b8c162962fafdab9d2b84ebc86b815c3bfe43deb8e4056622f4c557a
- MD5 5cd320e2d5f1bf93abe629b1abd5e734
- SHA1 32a896228c3d00f3c6eeb916864de565ca9b5720
- SHA512 b69377fdd915dc46eb99b89b2a45c9ee22f6da87c2d0023772ffa1a379e44914381c7b92e9ca6b64f669e24adde7cd4b81f4ef5616ddad13df0e6ad0c1d2a77d
- SSDEEP 6144:SQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:SQMyfmNFHfnWfhLZVHmOog
- TLSH T145549C107691C432C457267045AFABB24D793A752F36A6C3B7E01E69DE203E2EE7434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-08_5cd320e2d5f1bf93abe629b1abd5e734_elex_mafia_nionspy_remcos.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-08_5cd320e2d5f1bf93abe629b1abd5e734_elex_mafia_nionspy_remcos.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_5cd320e2d5f1bf93abe629b1abd5e734_elex_mafia_nionspy_remcos
- Size 280KB
- SHA256 ec37a4e3b8c162962fafdab9d2b84ebc86b815c3bfe43deb8e4056622f4c557a
- MD5 5cd320e2d5f1bf93abe629b1abd5e734
- SHA1 32a896228c3d00f3c6eeb916864de565ca9b5720
- SHA512 b69377fdd915dc46eb99b89b2a45c9ee22f6da87c2d0023772ffa1a379e44914381c7b92e9ca6b64f669e24adde7cd4b81f4ef5616ddad13df0e6ad0c1d2a77d
- SSDEEP 6144:SQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:SQMyfmNFHfnWfhLZVHmOog
- TLSH T145549C107691C432C457267045AFABB24D793A752F36A6C3B7E01E69DE203E2EE7434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE