7828bbe01bb6153d924846275b1514cdc525a4c3d49e501084aeaa7d8f345619 | Triage™

Login
Reports

Overview

overview

Static

static

3

2026-10-13...op.exe

windows10-2004-x64

2026-10-13...op.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-13_e965988157f57054ef628035aef74e67_elex_remcos_stop
Size 988KB
Sample261014-c3c8rae19m
SHA256 7828bbe01bb6153d924846275b1514cdc525a4c3d49e501084aeaa7d8f345619
MD5 e965988157f57054ef628035aef74e67
SHA1 5e2af24602ac3469f68293fbacbd5e7d8d34d5d4
SHA512 d44f60ec2a2c6aa0a867d8b3de6f121cf4462a04589dda90d633eb36055b22332be8b353f5765058fc7737091b430fa8045f0765b300393567bfcc43c6152def
SSDEEP 12288:M+q+hS1dmLj8zblEOGSEzUWzblE4wEQRUTEcfv44IdmIKUDxjbt:fLSvmLj8+O2+bc343
TLSH
T12A25CF20F7DAC171E9AB277009311E281A3ABE853B71C6CF9B8D7919CA723C29C75715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-10-13_e965988157f57054ef628035aef74e67_elex_remcos_stop.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

150 seconds

defense_evasion discovery privilege_escalation

Behavioral task

behavioral2

Sample

2026-10-13_e965988157f57054ef628035aef74e67_elex_remcos_stop.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

defense_evasion discovery privilege_escalation

Malware Config

Targets

- Target
  2026-10-13_e965988157f57054ef628035aef74e67_elex_remcos_stop
- Size 988KB
- SHA256 7828bbe01bb6153d924846275b1514cdc525a4c3d49e501084aeaa7d8f345619
- MD5 e965988157f57054ef628035aef74e67
- SHA1 5e2af24602ac3469f68293fbacbd5e7d8d34d5d4
- SHA512 d44f60ec2a2c6aa0a867d8b3de6f121cf4462a04589dda90d633eb36055b22332be8b353f5765058fc7737091b430fa8045f0765b300393567bfcc43c6152def
- SSDEEP 12288:M+q+hS1dmLj8zblEOGSEzUWzblE4wEQRUTEcfv44IdmIKUDxjbt:fLSvmLj8+O2+bc343
- TLSH
  T12A25CF20F7DAC171E9AB277009311E281A3ABE853B71C6CF9B8D7919CA723C29C75715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery privilege_escalation
- Modifies firewall policy service
  defense_evasion
- Drops file in Drivers directory
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Process Injection

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Process Injection

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryprivilege_escalation

behavioral2

defense_evasiondiscoveryprivilege_escalation

© 2018-2026

Terms | Privacy