General

  • Target
    2026-08-14_516fc51f60afd64027fab9fb33a06689_elex_remcos_rhadamanthys_stealc_stop
  • Size 115KB
  • Sample260814-e3txlsvvcy
  • SHA256 7fb796da6a99c55ffc9d3619cc9c4c31450490a0381668aa906aacbf35c47dbe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-08-14_516fc51f60afd64027fab9fb33a06689_elex_remcos_rhadamanthys_stealc_stop
    .exe 115KB

2026-08-14_516fc51f60afd64027fab9fb33a06689_elex_remcos_rhadamanthys_stealc_stop

  • IMPHASH 55fe5886e841f7c3568c70d98fa263e1
  • SHA256 7fb796da6a99c55ffc9d3619cc9c4c31450490a0381668aa906aacbf35c47dbe
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
5
Entry point
14235
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\Projects\Work\UsbBootWatcher\Release\UsbBootWatcher.pdb