2026-10-22_08d2c7e7d824fe9f28317d209ab9175f_elex_mafia_remcos

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_08d2c7e7d824fe9f28317d209ab9175f_elex_mafia_remcos
Size 564KB
Sample261024-2c8peasv4q
SHA256 7f6665fa7c40c6ebc29944d9765aeecbc01a444e672595d5251542fa2b67dd20
MD5 08d2c7e7d824fe9f28317d209ab9175f
SHA1 994b0f68097eebdc3d0b67043a6f8a3124225ea1
SHA512 b642facc658889ffd39c77c84804534b785307556f2e65b3ff818e653d4eb77e5e353acd58ee13ee289f013cca41e2ffba5123c15a1d3717f9c60f12d53dd551
SSDEEP 12288:ip5RbmjNN+HNPsmDWHgjMwePSl/j0YDE7JrJGKYcTZulH:ipKjKtPs8Wgwwiy/jSroKYcTglH
TLSH
T170C4F116B744C132E1D202350B96EBA2693A7C729B36A4CB33D4262E6FB57E1D374347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_08d2c7e7d824fe9f28317d209ab9175f_elex_mafia_remcos

File Explorer

2026-10-22_08d2c7e7d824fe9f28317d209ab9175f_elex_mafia_remcos

.exe 564KB

2026-10-22_08d2c7e7d824fe9f28317d209ab9175f_elex_mafia_remcos

SHA256 7f6665fa7c40c6ebc29944d9765aeecbc01a444e672595d5251542fa2b67dd20
MD5 08d2c7e7d824fe9f28317d209ab9175f
SHA1 994b0f68097eebdc3d0b67043a6f8a3124225ea1
SHA512 b642facc658889ffd39c77c84804534b785307556f2e65b3ff818e653d4eb77e5e353acd58ee13ee289f013cca41e2ffba5123c15a1d3717f9c60f12d53dd551
SSDEEP 12288:ip5RbmjNN+HNPsmDWHgjMwePSl/j0YDE7JrJGKYcTZulH:ipKjKtPs8Wgwwiy/jSroKYcTglH
TLSH
T170C4F116B744C132E1D202350B96EBA2693A7C729B36A4CB33D4262E6FB57E1D374347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

136KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

283KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_08d2c7e7d824fe9f28317d209ab9175f_elex_mafia_remcos

generic