2026-10-22_059657e8fb0584c29035dafc0024ba32_elex_mafia_remcos

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_059657e8fb0584c29035dafc0024ba32_elex_mafia_remcos
Size 564KB
Sample261024-2sjp8acy3w
SHA256 c40f47fd8a7256b8ce4131ab99f83125a99a799d1015f3403948eeff584627e9
MD5 059657e8fb0584c29035dafc0024ba32
SHA1 c558e8a7815c4e5b32c935bbfdcbb5d16e664dd6
SHA512 7bbe364c7682c4c46f7ba803a96ee316c175380c9d1a3d7b655710f3f70b410e36d0f005e0034720ff21cf8e2f8209ccc256dd45506605f26fad73c72879b027
SSDEEP 12288:ip5RbmjNN+HNSl9GWwal26LMPW3eNUhUTZulH:ipKjKtEpbl22S2eNUhUTglH
TLSH
T1E3C4F126B684C132E1D202360F96EBA26A3EBC315F2294C73794276E6FB53D1D374356
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_059657e8fb0584c29035dafc0024ba32_elex_mafia_remcos

File Explorer

2026-10-22_059657e8fb0584c29035dafc0024ba32_elex_mafia_remcos

.exe 564KB

2026-10-22_059657e8fb0584c29035dafc0024ba32_elex_mafia_remcos

SHA256 c40f47fd8a7256b8ce4131ab99f83125a99a799d1015f3403948eeff584627e9
MD5 059657e8fb0584c29035dafc0024ba32
SHA1 c558e8a7815c4e5b32c935bbfdcbb5d16e664dd6
SHA512 7bbe364c7682c4c46f7ba803a96ee316c175380c9d1a3d7b655710f3f70b410e36d0f005e0034720ff21cf8e2f8209ccc256dd45506605f26fad73c72879b027
SSDEEP 12288:ip5RbmjNN+HNSl9GWwal26LMPW3eNUhUTZulH:ipKjKtEpbl22S2eNUhUTglH
TLSH
T1E3C4F126B684C132E1D202360F96EBA26A3EBC315F2294C73794276E6FB53D1D374356
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

136KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

283KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_059657e8fb0584c29035dafc0024ba32_elex_mafia_remcos

generic