2026-07-23_90bae60660edca017faaa8df2400fb61_elex_remcos_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-23_90bae60660edca017faaa8df2400fb61_elex_remcos_stop
Size 256KB
Sample260723-p28pgsxta1
SHA256 6ab9b84387d2a6285adea0ca1c703879fccfc36f5a74d64e7939c00657210578
MD5 90bae60660edca017faaa8df2400fb61
SHA1 27902155b216c46dd74ea975785db6392fd072d3
SHA512 226bcc7a2aea5290ec1916253975d1147257660a53770e358c63328b43a8d4a960715ab4f7ce42668ab651b9a67ae42c6b6ede87334aa815d563522a20b7cb16
SSDEEP 3072:FK+mVRo0xLgCoz+cyBletX/I65EFFdAg0FuNrY/thp6AZCih2:FK+mVXLCz+cyBl0vhGzdAOtYjQAZ
TLSH
T1B1446B31B7D2C6F3C89B01720CEA575A66B7FA001F6692E377982B1E9D313D01A362D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_90bae60660edca017faaa8df2400fb61_elex_remcos_stop

File Explorer

2026-07-23_90bae60660edca017faaa8df2400fb61_elex_remcos_stop

.exe 256KB

2026-07-23_90bae60660edca017faaa8df2400fb61_elex_remcos_stop

IMPHASH 9241529931b02bf1f2fbbe6d6d620a8e
SHA256 6ab9b84387d2a6285adea0ca1c703879fccfc36f5a74d64e7939c00657210578
MD5 90bae60660edca017faaa8df2400fb61
SHA1 27902155b216c46dd74ea975785db6392fd072d3
SHA512 226bcc7a2aea5290ec1916253975d1147257660a53770e358c63328b43a8d4a960715ab4f7ce42668ab651b9a67ae42c6b6ede87334aa815d563522a20b7cb16
SSDEEP 3072:FK+mVRo0xLgCoz+cyBletX/I65EFFdAg0FuNrY/thp6AZCih2:FK+mVXLCz+cyBl0vhGzdAOtYjQAZ
TLSH
T1B1446B31B7D2C6F3C89B01720CEA575A66B7FA001F6692E377982B1E9D313D01A362D5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

78098

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA lstrcmpiA SetEvent CloseHandle CreateThread CreateEventA InterlockedIncrement GetModuleFileNameA IsDBCSLeadByte FreeLibrary SizeofResource LoadResource GetLastError LoadLibraryExA GetModuleHandleA Sleep GetCurrentThreadId GetCommandLineA FlushFileBuffers CreateFileA ReadFile DeleteCriticalSection InitializeCriticalSection RaiseException lstrlenW WideCharToMultiByte MultiByteToWideChar InterlockedDecrement CreateMutexA WaitForSingleObject FindResourceA ReleaseMutex WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle LoadLibraryA GetConsoleMode GetConsoleCP SetFilePointer GetStringTypeW GetStringTypeA GetSystemTimeAsFileTime InterlockedExchange GetACP GetLocaleInfoA GetThreadLocale GetVersionExA EnterCriticalSection LeaveCriticalSection LocalFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind HeapFree HeapAlloc VirtualProtect VirtualAlloc GetProcAddress GetSystemInfo VirtualQuery HeapReAlloc GetProcessHeap GetStartupInfoA GetCPInfo GetOEMCP TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError LCMapStringA LCMapStringW HeapDestroy HeapCreate VirtualFree ExitProcess WriteFile GetStdHandle HeapSize FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId

user32

CharNextA wsprintfA PostThreadMessageA DispatchMessageA GetMessageA UnregisterClassA

advapi32

RegSetValueExA RegCreateKeyExA RegDeleteValueA RegDeleteKeyA RegEnumKeyExA RegOpenKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey RegQueryInfoKeyA

ole32

CoRegisterClassObject CoTaskMemRealloc CoTaskMemAlloc CoCreateInstance CoTaskMemFree StringFromGUID2 CoUninitialize CoInitialize CoRevokeClassObject

oleaut32

VarUI4FromStr RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysAllocString SysStringLen SysStringByteLen SysAllocStringByteLen SysFreeString VariantClear

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_90bae60660edca017faaa8df2400fb61_elex_remcos_stop

kernel32

user32

advapi32

ole32

oleaut32

generic