2026-10-22_51ad64421347b3ffd9545856450cfa98_elex_mafia_remcos

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_51ad64421347b3ffd9545856450cfa98_elex_mafia_remcos
Size 564KB
Sample261024-ql2fxabz5k
SHA256 f9d358daffab89e307c93d2cd5ef42cffce255be2f31c09a2832b195f3e21ed6
MD5 51ad64421347b3ffd9545856450cfa98
SHA1 e1530f2576a0676f153985767052ec808fe2e194
SHA512 fbab83e11f07962e29cdf0852b8f2703402211773f7dfb8532f6576933af9aec37ddbc90d4b24e32c14c429cc3f40632d2a4da8977284c730237b31b3c4db3b8
SSDEEP 12288:ip5RbmjNN+HNTrOnxcqtYx5l+LZTZulH:ipKjKtTraJttLZTglH
TLSH
T113C4F126B680C132E1D311364E56DBA26A3FBC765B3690CB7790266E6EB13E1D375303
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_51ad64421347b3ffd9545856450cfa98_elex_mafia_remcos

File Explorer

2026-10-22_51ad64421347b3ffd9545856450cfa98_elex_mafia_remcos

.exe 564KB

2026-10-22_51ad64421347b3ffd9545856450cfa98_elex_mafia_remcos

SHA256 f9d358daffab89e307c93d2cd5ef42cffce255be2f31c09a2832b195f3e21ed6
MD5 51ad64421347b3ffd9545856450cfa98
SHA1 e1530f2576a0676f153985767052ec808fe2e194
SHA512 fbab83e11f07962e29cdf0852b8f2703402211773f7dfb8532f6576933af9aec37ddbc90d4b24e32c14c429cc3f40632d2a4da8977284c730237b31b3c4db3b8
SSDEEP 12288:ip5RbmjNN+HNTrOnxcqtYx5l+LZTZulH:ipKjKtTraJttLZTglH
TLSH
T113C4F126B680C132E1D311364E56DBA26A3FBC765B3690CB7790266E6EB13E1D375303
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

136KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

283KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_51ad64421347b3ffd9545856450cfa98_elex_mafia_remcos

generic