General
- Target 2026-11-10_f4cd2d08f05c7ac82a5c68be6b6e93dd_elex_remcos_stop
- Size 3.2MB
- Sample261110-e9kyaach44
- SHA256 1c5c10c9031c4d083d0ab85c80f20ab93397e6d97c923eb6c9c7166bdd3a47ff
- MD5 f4cd2d08f05c7ac82a5c68be6b6e93dd
- SHA1 62e1fc92619a67e3b064f5dbe8f1d0e8a84f4996
- SHA512 866bb3155e4198ecda2907755349f3d32f21e088b3f03a9a551b8574f5f1771313472b8c3b49bd81139f271daa9b8e5a158ec14bc6d6ac9c651264c6b36749b5
- SSDEEP 49152:x11MwltwThAt7Uv+MnIICTgxJqWgVBKkGQoAWhI/36YLaWijEwdNh:/1VZGGMnIieKDQ4I/KYLaZEY
- TLSH T10CF5F1A1B7D5E0B4E8820134C19BE0F6A9D7AC82E332295731627FC63B7874667147F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-10_f4cd2d08f05c7ac82a5c68be6b6e93dd_elex_remcos_stop.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-10_f4cd2d08f05c7ac82a5c68be6b6e93dd_elex_remcos_stop
- Size 3.2MB
- SHA256 1c5c10c9031c4d083d0ab85c80f20ab93397e6d97c923eb6c9c7166bdd3a47ff
- MD5 f4cd2d08f05c7ac82a5c68be6b6e93dd
- SHA1 62e1fc92619a67e3b064f5dbe8f1d0e8a84f4996
- SHA512 866bb3155e4198ecda2907755349f3d32f21e088b3f03a9a551b8574f5f1771313472b8c3b49bd81139f271daa9b8e5a158ec14bc6d6ac9c651264c6b36749b5
- SSDEEP 49152:x11MwltwThAt7Uv+MnIICTgxJqWgVBKkGQoAWhI/36YLaWijEwdNh:/1VZGGMnIieKDQ4I/KYLaZEY
- TLSH T10CF5F1A1B7D5E0B4E8820134C19BE0F6A9D7AC82E332295731627FC63B7874667147F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1