2026-08-05_1f2f250d4208ec13b8c2c571d74c34dd_elex_maze_remcos_stealc

General

Target
2026-08-05_1f2f250d4208ec13b8c2c571d74c34dd_elex_maze_remcos_stealc
Size 395KB
Sample260805-hypnwafe53
SHA256 a8da236421bed15adedf0de9bd8b1abb92d76d3092ee94b82e12eb39a13006d2
MD5 1f2f250d4208ec13b8c2c571d74c34dd
SHA1 679c1e6aa944a2910362a52e31e89a69dc153a4d
SHA512 ccb49c85b8e06f40f783615add0d38af288d698fcb7be1af128f77999f9b43979d2f8454aba9d1890bf5b2e48c751aebeec65ba21598b3a340db78e0dafcc8d5
SSDEEP 12288:ga2KiAwmVH4Ke7hVFF9+Ip5zqmjVB4OUg:ilXKkhnj+Ip53TP
TLSH
T1DC849C22F5C0C131D1B2467A9C78FB3152FCB9B01F6569DBB7C80A894AB6DE06632753
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-05_1f2f250d4208ec13b8c2c571d74c34dd_elex_maze_remcos_stealc

File Explorer

2026-08-05_1f2f250d4208ec13b8c2c571d74c34dd_elex_maze_remcos_stealc

.exe 395KB

2026-08-05_1f2f250d4208ec13b8c2c571d74c34dd_elex_maze_remcos_stealc

IMPHASH 49b138892e87f222db7b784fa79c19ac
SHA256 a8da236421bed15adedf0de9bd8b1abb92d76d3092ee94b82e12eb39a13006d2
MD5 1f2f250d4208ec13b8c2c571d74c34dd
SHA1 679c1e6aa944a2910362a52e31e89a69dc153a4d
SHA512 ccb49c85b8e06f40f783615add0d38af288d698fcb7be1af128f77999f9b43979d2f8454aba9d1890bf5b2e48c751aebeec65ba21598b3a340db78e0dafcc8d5
SSDEEP 12288:ga2KiAwmVH4Ke7hVFF9+Ip5zqmjVB4OUg:ilXKkhnj+Ip53TP
TLSH
T1DC849C22F5C0C131D1B2467A9C78FB3152FCB9B01F6569DBB7C80A894AB6DE06632753
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

139092

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

GetDCBrushColor GetCurrentObject GetGraphicsMode GetMapMode GetPolyFillMode GetRandomRgn GetStretchBltMode GetSystemPaletteUse GetTextCharset GetTextCharsetInfo GetFontLanguageInfo GetFontUnicodeRanges SetPixel SetSystemPaletteUse SetTextCharacterExtra SetTextColor SetTextAlign SetTextJustification UpdateColors

user32

LoadIconA GetWindowLongA GetMenuContextHelpId GetWindowContextHelpId RemovePropA GetPropA GetScrollPos EndPaint BeginPaint GetWindowDC GetDC WindowFromDC GetForegroundWindow DrawTextA GetMenuCheckMarkDimensions GetMenuItemCount GetMenuItemID GetMenuState GetMenu IsWindowEnabled EnableWindow IsWindowUnicode GetQueueStatus GetInputState GetKeyboardType SetFocus GetDialogBaseUnits CheckDlgButton SetDlgItemTextA GetDlgItem EndDialog MoveWindow ShowWindow CallWindowProcA PostMessageA SendMessageA

kernel32

SetEnvironmentVariableA GetFullPathNameA ReadConsoleW ReadFile SetEndOfFile GetTimeZoneInformation WriteConsoleW SetFilePointerEx SetStdHandle CreateFileW GetCurrentDirectoryW SetCurrentDirectoryW GetFullPathNameW PeekNamedPipe GetFileInformationByHandle FileTimeToLocalFileTime GetStringTypeW OutputDebugStringW HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW FreeEnvironmentStringsW GetEnvironmentStringsW GetModuleFileNameA GetConsoleMode GetConsoleCP FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetDriveTypeW FindFirstFileExW GetCurrentThread GetStdHandle DeleteFileA FindClose FlushFileBuffers GetDriveTypeA GetFileTime GetFileType SetFilePointer WriteFile IsDebuggerPresent CloseHandle GetLastError QueryPerformanceCounter GetProcessHeap GetCurrentProcess GetCurrentProcessId CreateThread GetCurrentThreadId IsProcessorFeaturePresent GetVersion GetTickCount GetModuleHandleA GetProcAddress LoadResource LockResource SizeofResource GlobalAlloc GlobalSize GlobalHandle FindResourceA MoveFileA EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte HeapFree HeapAlloc GetSystemTimeAsFileTime GetCommandLineA RaiseException RtlUnwind HeapSize EnterCriticalSection LeaveCriticalSection DeleteCriticalSection FatalAppExitA UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount CreateEventW Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW CreateSemaphoreW GetModuleFileNameW SetConsoleCtrlHandler FreeLibrary LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-05_1f2f250d4208ec13b8c2c571d74c34dd_elex_maze_remcos_stealc

gdi32

user32

kernel32

generic