2026-07-28_acf96b33feb1648e19404ebf16b48b8d_amadey_elex_floxif_remcos_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-28_acf96b33feb1648e19404ebf16b48b8d_amadey_elex_floxif_remcos_stealc_stop
Size 378KB
Sample260728-183mlaxeqf
SHA256 59d701c088ded5b9952fb343bb0627492d31b7434d2146174ad352087a8a33ae
MD5 acf96b33feb1648e19404ebf16b48b8d
SHA1 2ea200c4611e7ba069486c5c6d2fbd7957ddde80
SHA512 9a03cb4bf897b61e3b013a4e99e61ce5136dd95a0f6f39302c8715cd4d1109ea4c0075d250f8d29e39166863d04a0687acd2e70cbd549406830212062c9acee6
SSDEEP 6144:BYOhtQYzFMr0FKwb+q4E1KWpvLGSHYenCtGz7d6JAOgnBV+UdvrEFp7hKWlV:yOht5FMrkKwb+FcKWdLGSNnCtSd6J+Ba
TLSH
T1B084BE15FB80C3F0C9911431B41E9B26DABA563C0B7856D7E3D11A6DAE2C3E1E63A707
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-28_acf96b33feb1648e19404ebf16b48b8d_amadey_elex_floxif_remcos_stealc_stop

File Explorer

2026-07-28_acf96b33feb1648e19404ebf16b48b8d_amadey_elex_floxif_remcos_stealc_stop

.exe 378KB

2026-07-28_acf96b33feb1648e19404ebf16b48b8d_amadey_elex_floxif_remcos_stealc_stop

IMPHASH 17797d93d13597bea2275227e5b882c1
SHA256 59d701c088ded5b9952fb343bb0627492d31b7434d2146174ad352087a8a33ae
MD5 acf96b33feb1648e19404ebf16b48b8d
SHA1 2ea200c4611e7ba069486c5c6d2fbd7957ddde80
SHA512 9a03cb4bf897b61e3b013a4e99e61ce5136dd95a0f6f39302c8715cd4d1109ea4c0075d250f8d29e39166863d04a0687acd2e70cbd549406830212062c9acee6
SSDEEP 6144:BYOhtQYzFMr0FKwb+q4E1KWpvLGSHYenCtGz7d6JAOgnBV+UdvrEFp7hKWlV:yOht5FMrkKwb+FcKWdLGSNnCtSd6J+Ba
TLSH
T1B084BE15FB80C3F0C9911431B41E9B26DABA563C0B7856D7E3D11A6DAE2C3E1E63A707
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

163926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

dinput8

DirectInput8Create

dsound

ord11

ddraw

DirectDrawCreateEx

winmm

timeBeginPeriod timeGetTime mmioOpenA mmioDescend mmioRead mmioAscend mmioSeek mmioGetInfo mmioAdvance mmioSetInfo

kernel32

GetModuleHandleA CloseHandle PurgeComm SetCommMask ClearCommError GetOverlappedResult GetLastError WriteFile ReadFile WaitCommEvent CreateEventA CreateThread SetCommTimeouts SetCommState GetCommState CreateFileA SetFilePointer MultiByteToWideChar WideCharToMultiByte GetTickCount LeaveCriticalSection EnterCriticalSection CreateDirectoryA InitializeCriticalSection SetLocalTime GetLocalTime SetEvent WaitForSingleObject ResetEvent GetCommMask GetCommTimeouts GetCurrentProcess DeleteFileA GetPrivateProfileStringA GetDriveTypeA Sleep SetStdHandle CompareStringA GetStringTypeW GetStringTypeA GetLocaleInfoA WriteConsoleW GetConsoleOutputCP WriteConsoleA GetProcessHeap SetEndOfFile LCMapStringW LCMapStringA GetTimeZoneInformation FlushFileBuffers IsValidCodePage GetOEMCP GetACP GetCPInfo LoadLibraryA GetFullPathNameA InterlockedDecrement InitializeCriticalSectionAndSpinCount HeapSize GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetConsoleMode GetConsoleCP CompareStringW GetCurrentThreadId HeapFree HeapAlloc FindClose FileTimeToSystemTime FileTimeToLocalFileTime FindFirstFileA RaiseException RtlUnwind SetEnvironmentVariableA GetCurrentDirectoryA GetSystemTimeAsFileTime GetFileInformationByHandle PeekNamedPipe GetFileType GetCommandLineA GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection VirtualAlloc HeapReAlloc GetModuleHandleW GetProcAddress ExitProcess GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError SetHandleCount

user32

DispatchMessageA PostQuitMessage ChangeDisplaySettingsA PostMessageA SetRect UpdateWindow ShowWindow CreateWindowExA GetAsyncKeyState LoadStringA ShowCursor PeekMessageA GetMessageA TranslateMessage MessageBoxA LoadIconA LoadCursorA RegisterClassExA DefWindowProcA ExitWindowsEx SystemParametersInfoA

gdi32

CreateFontA DeleteObject

advapi32

LookupPrivilegeValueA OpenProcessToken AdjustTokenPrivileges

iphlpapi

GetAdaptersInfo

ws2_32

htons

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-28_acf96b33feb1648e19404ebf16b48b8d_amadey_elex_floxif_remcos_stealc_stop

dinput8

dsound

ddraw

winmm

kernel32

user32

gdi32

advapi32

iphlpapi

ws2_32

generic