2026-07-05_ea48a30141b7c0b4761111e16d7ec30b_elex_floxif_remcos_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-05_ea48a30141b7c0b4761111e16d7ec30b_elex_floxif_remcos_stop
Size 1.4MB
Sample260705-fb9dnahw3s
SHA256 024804487e0437430c521eaf5777701d52767071ec18154b0f45d4c8c4add34a
MD5 ea48a30141b7c0b4761111e16d7ec30b
SHA1 93bd2a48773dfbabfb8297d462caf7d3eb4736bc
SHA512 aafd90f0c0a1c0138bd2f42e3c20d7a86d9ee715e24b7802ead22f19ed844b7e2e9bfde486f80a034eea176857ed312f3c1fec05c89c7f3dfc7ba203f284f32b
SSDEEP 24576:5+cOwNjIEhfwK58W0c3k9A99JFWt8HhGokqxTiAQn9VOorEH7P:5JOk158W0c3kejJcORpiAMnW
TLSH
T1D9656D417D0A87A3C99D40FD743B5898429B7E44AA99B0F3F63872D25E70787E13A38D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-05_ea48a30141b7c0b4761111e16d7ec30b_elex_floxif_remcos_stop

File Explorer

2026-07-05_ea48a30141b7c0b4761111e16d7ec30b_elex_floxif_remcos_stop

.exe 1.4MB

2026-07-05_ea48a30141b7c0b4761111e16d7ec30b_elex_floxif_remcos_stop

IMPHASH e9b39c8092deb6c54b4f786339533f0f
SHA256 024804487e0437430c521eaf5777701d52767071ec18154b0f45d4c8c4add34a
MD5 ea48a30141b7c0b4761111e16d7ec30b
SHA1 93bd2a48773dfbabfb8297d462caf7d3eb4736bc
SHA512 aafd90f0c0a1c0138bd2f42e3c20d7a86d9ee715e24b7802ead22f19ed844b7e2e9bfde486f80a034eea176857ed312f3c1fec05c89c7f3dfc7ba203f284f32b
SSDEEP 24576:5+cOwNjIEhfwK58W0c3k9A99JFWt8HhGokqxTiAQn9VOorEH7P:5JOk158W0c3kejJcORpiAMnW
TLSH
T1D9656D417D0A87A3C99D40FD743B5898429B7E44AA99B0F3F63872D25E70787E13A38D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

174328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\temp\ICCS_Temp\Installer\ICCS\release\setup.pdb

kernel32

GetFileSize ReadFile MultiByteToWideChar GetFileTime FileTimeToSystemTime SystemTimeToTzSpecificLocalTime LoadLibraryW GetModuleFileNameA CreateMutexW WriteFile CreateThread WaitForSingleObject GetLocalTime GetCommandLineW GetTickCount SetFilePointer EnumResourceLanguagesW GetUserDefaultLangID GetUserDefaultUILanguage GetVersion ConvertDefaultLocale GetLocaleInfoW GetVersionExW GetCurrentProcess GetSystemInfo GetSystemWow64DirectoryW OpenProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW TerminateProcess CreateProcessW GetExitCodeProcess GlobalAlloc GlobalLock GlobalUnlock GlobalFree ExitProcess CreateFileW SetEvent GetEnvironmentVariableW SetEndOfFile LoadLibraryA IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA FlushFileBuffers GetOEMCP GetACP HeapSize WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetStartupInfoA SetHandleCount GetCurrentThreadId SetLastError GetFileType GetStdHandle HeapCreate HeapDestroy CopyFileW GetTempFileNameW GetTempPathW SetFileAttributesW FindClose FindNextFileW FindFirstFileW MoveFileExW CreateEventW DeleteFileW GetWindowsDirectoryW GetSystemDirectoryW GetCurrentDirectoryW TlsGetValue FreeLibrary RemoveDirectoryW GetProcAddress MoveFileW LoadLibraryExW SetErrorMode Sleep GetFileAttributesW CompareFileTime LocalFree GetModuleFileNameW WideCharToMultiByte CloseHandle GetLastError CreateFileA SizeofResource LockResource LoadResource FindResourceW HeapReAlloc VirtualAlloc VirtualFree GetModuleHandleA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA RtlUnwind GetModuleHandleW TlsFree TlsSetValue TlsAlloc SetFileAttributesA SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime RaiseException GetCPInfo GetStartupInfoW GetProcessHeap GetVersionExA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetConsoleMode GetConsoleCP HeapFree HeapAlloc LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection InterlockedDecrement InterlockedIncrement InterlockedExchange InterlockedCompareExchange

user32

EndDialog SetTimer SetDlgItemTextW MessageBoxW wsprintfW KillTimer SendDlgItemMessageW MonitorFromWindow GetMonitorInfoW OffsetRect GetWindowLongW AdjustWindowRect GetWindowRect GetDlgItem DrawTextW SetWindowTextW LoadIconW MessageBoxIndirectW SetRectEmpty PostMessageW EnableWindow ReleaseDC GetDC SetFocus ShowWindow DialogBoxIndirectParamW SetWindowPos GetClientRect ExitWindowsEx EnumWindows SendMessageW GetWindowThreadProcessId GetWindowModuleFileNameW SendMessageTimeoutW LoadStringW DialogBoxParamW

gdi32

GetTextExtentPoint32W SelectObject CreateCompatibleDC DeleteObject CreateFontW GetStockObject SetBkMode SetTextColor DeleteDC

advapi32

RegQueryValueExW SetNamedSecurityInfoW RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegEnumValueW RegCloseKey IsTextUnicode RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken DeleteService ControlService StartServiceW CloseServiceHandle ChangeServiceConfigW ChangeServiceConfig2W CreateServiceW OpenServiceW OpenSCManagerW QueryServiceStatus RegEnumKeyExW RegDeleteValueW RegQueryInfoKeyW GetNamedSecurityInfoW

shell32

SHCreateDirectoryExW SHGetFolderPathW CommandLineToArgvW SHCreateDirectoryExA

ole32

CoUninitialize CoInitialize CoCreateInstance

cabinet

ord22 ord23 ord20 ord21

shlwapi

PathRemoveBackslashW PathIsRootW PathIsSystemFolderW PathMatchSpecA PathIsDirectoryW PathAddBackslashW PathFindExtensionW PathCombineW PathStripToRootW SHDeleteKeyW PathRemoveFileSpecW PathFileExistsW PathAppendW PathFindFileNameA PathAddBackslashA PathRemoveFileSpecA PathAppendA PathFindFileNameW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

psapi

GetModuleFileNameExW EnumProcessModules

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-05_ea48a30141b7c0b4761111e16d7ec30b_elex_floxif_remcos_stop

kernel32

user32

gdi32

advapi32

shell32

ole32

cabinet

shlwapi

version

psapi

generic