2026-08-17_94ebbf2bdedfd6d510e514fff1877c86_amadey_elex_floxif_remcos_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-17_94ebbf2bdedfd6d510e514fff1877c86_amadey_elex_floxif_remcos_stealc_stop
Size 363KB
Sample260817-cfmtns1erg
SHA256 9f5744afb191e9d9639fbf2b3e2c8e30be2a36ec40a05942c4c2e0b9a0efea69
MD5 94ebbf2bdedfd6d510e514fff1877c86
SHA1 1e229a86d090ae42e8c135565568491b75ff6308
SHA512 47a71a2e01744527065dd4846d2ed50108692b45101dc30a9b3e93a4622aaf15c8d00564899cc88709c5e3c17e9bacf2daa1f462fce098c60c048744fa1c435b
SSDEEP 6144:TbcV2cA6JpS72U6hmtOgbcwx+yBATAO9pWBV+UdvrEFp7hKEkAOs:O2cAUpSp6hmtOGc++yBcBWBjvrEH70Ts
TLSH
T19F84BF15F790C3F0C9460936B45A9B37C9F6523C0BB546DBE7E01A5C9E2C3F0AA3A646
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-17_94ebbf2bdedfd6d510e514fff1877c86_amadey_elex_floxif_remcos_stealc_stop

File Explorer

2026-08-17_94ebbf2bdedfd6d510e514fff1877c86_amadey_elex_floxif_remcos_stealc_stop

.exe 363KB

2026-08-17_94ebbf2bdedfd6d510e514fff1877c86_amadey_elex_floxif_remcos_stealc_stop

IMPHASH a1fc1098472f18467dbdb174a5e15c65
SHA256 9f5744afb191e9d9639fbf2b3e2c8e30be2a36ec40a05942c4c2e0b9a0efea69
MD5 94ebbf2bdedfd6d510e514fff1877c86
SHA1 1e229a86d090ae42e8c135565568491b75ff6308
SHA512 47a71a2e01744527065dd4846d2ed50108692b45101dc30a9b3e93a4622aaf15c8d00564899cc88709c5e3c17e9bacf2daa1f462fce098c60c048744fa1c435b
SSDEEP 6144:TbcV2cA6JpS72U6hmtOgbcwx+yBATAO9pWBV+UdvrEFp7hKEkAOs:O2cAUpSp6hmtOGc++yBcBWBjvrEH70Ts
TLSH
T19F84BF15F790C3F0C9460936B45A9B37C9F6523C0BB546DBE7E01A5C9E2C3F0AA3A646
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

135014

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

dinput8

DirectInput8Create

dsound

ord11

ddraw

DirectDrawCreateEx

winmm

mmioAdvance mmioSetInfo mmioGetInfo mmioSeek mmioAscend mmioRead mmioDescend mmioOpenA timeGetTime timeBeginPeriod

aceboard

?GetQueueData@CAceBoard@@QAEHPAE@Z ?CloseAcePort@CAceBoard@@QAEHXZ ?OpenAcePort@CAceBoard@@QAEHPADK@Z ?SendUserData@CAceBoard@@QAEXPAEH@Z ??0CAceBoard@@QAE@XZ ?GetQueueDataSize@CAceBoard@@QAEHXZ

kernel32

GetModuleHandleA CloseHandle ClearCommError GetOverlappedResult GetLastError WriteFile ReadFile CreateFileA SetFilePointer MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringA SetLocalTime GetLocalTime GetCurrentProcess GetTickCount WriteConsoleA GetProcessHeap SetEndOfFile LCMapStringW LCMapStringA GetTimeZoneInformation FlushFileBuffers IsValidCodePage GetOEMCP GetACP GetCPInfo LoadLibraryA InitializeCriticalSectionAndSpinCount GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetConsoleMode GetConsoleCP HeapSize SetHandleCount GetConsoleOutputCP WriteConsoleW GetLocaleInfoA GetStringTypeA GetStringTypeW SetStdHandle CompareStringA HeapAlloc HeapFree CompareStringW FileTimeToSystemTime FileTimeToLocalFileTime RaiseException RtlUnwind SetEnvironmentVariableA GetFileInformationByHandle PeekNamedPipe GetFileType GetSystemTimeAsFileTime GetCommandLineA GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetModuleHandleW Sleep GetProcAddress ExitProcess GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement

user32

ShowCursor LoadIconA LoadCursorA RegisterClassExA ExitWindowsEx DefWindowProcA GetMessageA TranslateMessage PeekMessageA DispatchMessageA LoadStringA CreateWindowExA ShowWindow UpdateWindow SetRect PostMessageA GetAsyncKeyState ChangeDisplaySettingsA PostQuitMessage MessageBoxA SystemParametersInfoA

gdi32

CreateFontA DeleteObject

advapi32

LookupPrivilegeValueA OpenProcessToken AdjustTokenPrivileges

iphlpapi

GetAdaptersInfo

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-17_94ebbf2bdedfd6d510e514fff1877c86_amadey_elex_floxif_remcos_stealc_stop

dinput8

dsound

ddraw

winmm

aceboard

kernel32

user32

gdi32

advapi32

iphlpapi

generic