2026-08-01_b447cf272b7d0d44141f5483f6d705dc_elex_floxif_remcos_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-01_b447cf272b7d0d44141f5483f6d705dc_elex_floxif_remcos_stealc_stop
Size 554KB
Sample260802-ekrdrscg69
SHA256 5ce7051623d5f2ac74a580dfdd57bdd9382e46f8f46294be9b682a5f2d8949ed
MD5 b447cf272b7d0d44141f5483f6d705dc
SHA1 6ab9eef9e0554913e7547b34e16491c56307c24d
SHA512 de2155ecbca9da0a3fc4c90751f0056f7e19a2f742b732442282486ad199bf1cc73baba8351c26573c92b4c1cde8ab14bdceb0450ce60ab468f14aa50492d321
SSDEEP 12288:/Qty1znyZH2GLBerK6+Iw9eC1tt/ngZ2xg5t/r+ALkUkT+RBjvrEH79:N1G5Cvr+ALkUG0rEH79
TLSH
T1B1C4BF09EFD287E2D40D183CF49B5396E979427C0B7129D7E3C45D28AE043E1A7BAB49
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_b447cf272b7d0d44141f5483f6d705dc_elex_floxif_remcos_stealc_stop

File Explorer

2026-08-01_b447cf272b7d0d44141f5483f6d705dc_elex_floxif_remcos_stealc_stop

.exe 554KB

2026-08-01_b447cf272b7d0d44141f5483f6d705dc_elex_floxif_remcos_stealc_stop

IMPHASH dfef5eaa81ff58517eed176158521414
SHA256 5ce7051623d5f2ac74a580dfdd57bdd9382e46f8f46294be9b682a5f2d8949ed
MD5 b447cf272b7d0d44141f5483f6d705dc
SHA1 6ab9eef9e0554913e7547b34e16491c56307c24d
SHA512 de2155ecbca9da0a3fc4c90751f0056f7e19a2f742b732442282486ad199bf1cc73baba8351c26573c92b4c1cde8ab14bdceb0450ce60ab468f14aa50492d321
SSDEEP 12288:/Qty1znyZH2GLBerK6+Iw9eC1tt/ngZ2xg5t/r+ALkUkT+RBjvrEH79:N1G5Cvr+ALkUG0rEH79
TLSH
T1B1C4BF09EFD287E2D40D183CF49B5396E979427C0B7129D7E3C45D28AE043E1A7BAB49
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

316153

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

dinput8

DirectInput8Create

dsound

ord11

ddraw

DirectDrawCreateEx

winmm

timeBeginPeriod timeGetTime mmioGetInfo mmioSeek mmioDescend mmioSetInfo mmioAscend mmioOpenA mmioRead mmioAdvance

kernel32

InterlockedIncrement GetModuleHandleA CreateFileA ClearCommError GetCommState WriteFile SetCommState SetCommTimeouts CreateEventA ReadFile GetOverlappedResult GetLastError SetCommMask WaitCommEvent PurgeComm CloseHandle CreateThread SetFilePointer WideCharToMultiByte MultiByteToWideChar SetLocalTime GetTickCount InitializeCriticalSection LeaveCriticalSection CreateDirectoryA EnterCriticalSection GetLocalTime WaitForSingleObject SetEvent ResetEvent GetCommMask GetCommTimeouts GetFileSize OpenFile SystemTimeToTzSpecificLocalTime _lclose FileTimeToSystemTime GetFileTime GetCurrentProcess Sleep GetPrivateProfileStringA SetLastError CompareStringA GetStringTypeW GetStringTypeA GetProcessHeap SetEndOfFile GetLocaleInfoA LCMapStringW LCMapStringA GetTimeZoneInformation IsValidCodePage GetOEMCP GetACP GetCPInfo FlushFileBuffers WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle LoadLibraryA TlsFree TlsSetValue InitializeCriticalSectionAndSpinCount GetCurrentProcessId QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings TlsAlloc FreeEnvironmentStringsA HeapSize GetDriveTypeA CompareStringW InterlockedDecrement HeapFree HeapAlloc FindFirstFileA FindClose FileTimeToLocalFileTime SetEnvironmentVariableA GetCurrentDirectoryA GetSystemTimeAsFileTime GetCommandLineA GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection VirtualAlloc HeapReAlloc GetModuleHandleW GetProcAddress ExitProcess GetStdHandle GetModuleFileNameA RtlUnwind GetConsoleCP GetConsoleMode RaiseException GetFullPathNameA TlsGetValue GetCurrentThreadId

user32

TranslateMessage ChangeDisplaySettingsA MessageBoxA PostQuitMessage PostMessageA SetRect LoadCursorA UpdateWindow SystemParametersInfoA DispatchMessageA GetAsyncKeyState GetMessageA RegisterClassExA LoadStringA LoadIconA ExitWindowsEx ShowWindow ShowCursor CreateWindowExA PeekMessageA DefWindowProcA

gdi32

CreateFontA DeleteObject

advapi32

LookupPrivilegeValueA AdjustTokenPrivileges OpenProcessToken

ws2_32

htons

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-01_b447cf272b7d0d44141f5483f6d705dc_elex_floxif_remcos_stealc_stop

dinput8

dsound

ddraw

winmm

kernel32

user32

gdi32

advapi32

ws2_32

generic