General
- Target 2026-08-02_83e4431ff6b8185e30774604505e5105_elex_remcos_stealc_stop_swisyn
- Size 678KB
- Sample260802-1fvfhsxxa1
- SHA256 17472239897533252fecac42d9508407c077f75539b5a959236a9fe6c2963533
- MD5 83e4431ff6b8185e30774604505e5105
- SHA1 8effe68c163e5880673e13187c275f247ea313c3
- SHA512 e77a050505af68d744c325abb4d4e5e1739950d0845e0ac93cd47162389f221c004c4813c314b6ecd47d6ed6e23f761a19966cd7faacaebc758d974c4f4d26ac
- SSDEEP 12288:cFUNDa0Qrlc3ouqHS+H2TnFRQHbl917BM3dHA+DpjGlVRdOOLwCVO:cFOa0QG4UnoL17oA+Dpj4POODO
- TLSH T14FE48C12FB92C036E4B605B158B8E6797E35BD715B3588EB73D02E280D712D2BA7131B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_83e4431ff6b8185e30774604505e5105_elex_remcos_stealc_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_83e4431ff6b8185e30774604505e5105_elex_remcos_stealc_stop_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_83e4431ff6b8185e30774604505e5105_elex_remcos_stealc_stop_swisyn
- Size 678KB
- SHA256 17472239897533252fecac42d9508407c077f75539b5a959236a9fe6c2963533
- MD5 83e4431ff6b8185e30774604505e5105
- SHA1 8effe68c163e5880673e13187c275f247ea313c3
- SHA512 e77a050505af68d744c325abb4d4e5e1739950d0845e0ac93cd47162389f221c004c4813c314b6ecd47d6ed6e23f761a19966cd7faacaebc758d974c4f4d26ac
- SSDEEP 12288:cFUNDa0Qrlc3ouqHS+H2TnFRQHbl917BM3dHA+DpjGlVRdOOLwCVO:cFOa0QG4UnoL17oA+Dpj4POODO
- TLSH T14FE48C12FB92C036E4B605B158B8E6797E35BD715B3588EB73D02E280D712D2BA7131B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory