General
- Target 2026-10-16_e2e7e9552bc094208ac865aff1bb1f42_elex_mafia_nionspy_remcos
- Size 288KB
- Sample261017-e896sahw4j
- SHA256 c6f403960c4a085ca247bc3f891284d700d1af6caa199eb6ea24879971301c36
- MD5 e2e7e9552bc094208ac865aff1bb1f42
- SHA1 a4f225d530ee3bf89d3946df219624a4a349884d
- SHA512 2e4603d078484ae7edcd6801f0cfaa3556d83dbcd8df47e9dd833c9d6c14f3d9ef307dfb5a0973820626a18f5278400c459989ea523eee5c339ace35bb49daed
- SSDEEP 6144:eQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:eQMyfmNFHfnWfhLZVHmOog
- TLSH T1EF549C107691C432C457267045AFABB24D793A752F36A6C3B7E01E69DE203E2EE7434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-16_e2e7e9552bc094208ac865aff1bb1f42_elex_mafia_nionspy_remcos.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_e2e7e9552bc094208ac865aff1bb1f42_elex_mafia_nionspy_remcos.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_e2e7e9552bc094208ac865aff1bb1f42_elex_mafia_nionspy_remcos
- Size 288KB
- SHA256 c6f403960c4a085ca247bc3f891284d700d1af6caa199eb6ea24879971301c36
- MD5 e2e7e9552bc094208ac865aff1bb1f42
- SHA1 a4f225d530ee3bf89d3946df219624a4a349884d
- SHA512 2e4603d078484ae7edcd6801f0cfaa3556d83dbcd8df47e9dd833c9d6c14f3d9ef307dfb5a0973820626a18f5278400c459989ea523eee5c339ace35bb49daed
- SSDEEP 6144:eQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:eQMyfmNFHfnWfhLZVHmOog
- TLSH T1EF549C107691C432C457267045AFABB24D793A752F36A6C3B7E01E69DE203E2EE7434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE