General
- Target 2026-10-17_ff924044b65c82d682a78fdcf13bf96d_amadey_elex_remcos_stop
- Size 353KB
- Sample261017-3rallady2n
- SHA256 105f4b627ded60b8ea12b694939eda5f0705de3c7402527fdea68ea5471054ba
- MD5 ff924044b65c82d682a78fdcf13bf96d
- SHA1 0b480d4508b13b7ab868f0fd4489fba1b677d70c
- SHA512 ba2f7615e3212e8f05bb6d01e197f077b06e9d328404a039c3a1d00df0abfddc098f4405824bf9253ee24766ecc321f2caeec193c5760bdebec333182c55a8ba
- SSDEEP 6144:4bk6JkKxyybKQIdimRT9uVLntnCZyraoOCapQboUcUHwY:GkhKWREmT9uVLntnCgraWmncH
- TLSH T11774AE02BB95C136D906767604B7976B253AEC600B2493C7EB903B5EEE713D1ED3138A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-17_ff924044b65c82d682a78fdcf13bf96d_amadey_elex_remcos_stop.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-17_ff924044b65c82d682a78fdcf13bf96d_amadey_elex_remcos_stop.exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-17_ff924044b65c82d682a78fdcf13bf96d_amadey_elex_remcos_stop
- Size 353KB
- SHA256 105f4b627ded60b8ea12b694939eda5f0705de3c7402527fdea68ea5471054ba
- MD5 ff924044b65c82d682a78fdcf13bf96d
- SHA1 0b480d4508b13b7ab868f0fd4489fba1b677d70c
- SHA512 ba2f7615e3212e8f05bb6d01e197f077b06e9d328404a039c3a1d00df0abfddc098f4405824bf9253ee24766ecc321f2caeec193c5760bdebec333182c55a8ba
- SSDEEP 6144:4bk6JkKxyybKQIdimRT9uVLntnCZyraoOCapQboUcUHwY:GkhKWREmT9uVLntnCgraWmncH
- TLSH T11774AE02BB95C136D906767604B7976B253AEC600B2493C7EB903B5EEE713D1ED3138A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Loads dropped DLL
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.