Bonifico n.1101252230290346.docx.exe
Classification: Malicious
Bonifico n.1101252230290346.docx.exe is a malicious file sample. Linked to Remcos, Crossrat malware. Reported by 3 threat sources, last seen 2026-07-13.
Detection summary
- 0 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: REMCOS (S0332) CROSSRAT (S0235)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| CrossRAT | ThreatFox Abuse.ch | 2026-07-13 16:58:24 | 2026-07-13 17:25:04 | S0235 CrossRAT | |
| RemcosRAT | MalwareBazaar Abuse.ch | 2026-07-13 09:57:50 | 2026-07-13 09:57:50 | malicious-activity | |
| Remcos | Triage | 2026-07-13 08:27:52 | 2026-07-13 08:27:52 | malicious-activity | S0332 Remcos |
Tags
remcos remotehost7/12/26 rat jar.crossrat truptoSample information
- Filenames
- Bonifico n.1101252230290346.docx.exe, ec9416ccf51a95a73d9cbd6a54394212.docx.exe
- MD5
ec9416ccf51a95a73d9cbd6a54394212- SHA-1
f70b70582d3935ae4b225e7899f8e19c7983f0b7- SHA-256
52bd61ba2153572260fc9b8f7eac34b613272c428e715fe6b3505f96e4eacf5d- First indexed
- 2026-07-13 08:27:52
- Last updated
- 2026-09-04 08:20:08