2026-08-17_212885023507b1f98b1b4c9901ad96b1_elex_helldown_remcos

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-17_212885023507b1f98b1b4c9901ad96b1_elex_helldown_remcos
Size 3.0MB
Sample260817-qvphpscl2x
SHA256 ab915feef38e58fe4728a1fd8b9a3203e18a2c2d3c02b075c39838441a175aff
MD5 212885023507b1f98b1b4c9901ad96b1
SHA1 49fb639bd458bdb6cfa24467421a36ba09b82d4e
SHA512 5acfb9a4274f77c2cfb5cc2c1055adba5d20380e591e621509dd7a976f800a194f889e80e201943f8e0c90ae6989ad37f056a70b8d10c5b60781cbfe391c69ae
SSDEEP 49152:wcGmHDT2oxtQBpQM/SJzOyFfWmdg9EASTZHYjqnXdEWDHh7Y53WHeUsQ+6WuDgRB:wwHXt9JzOy9TZHzXdZ+FWHeUcIm3
TLSH
T1C3E52951F213C11BC8637AB0CA4BC5F11AA1AE589826D49B31DA7F4FBB71B513E2D603
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-17_212885023507b1f98b1b4c9901ad96b1_elex_helldown_remcos

File Explorer

2026-08-17_212885023507b1f98b1b4c9901ad96b1_elex_helldown_remcos

.exe 3.0MB

2026-08-17_212885023507b1f98b1b4c9901ad96b1_elex_helldown_remcos

IMPHASH fe3ff03276c9b9ff4030ef87b787dbf6
SHA256 ab915feef38e58fe4728a1fd8b9a3203e18a2c2d3c02b075c39838441a175aff
MD5 212885023507b1f98b1b4c9901ad96b1
SHA1 49fb639bd458bdb6cfa24467421a36ba09b82d4e
SHA512 5acfb9a4274f77c2cfb5cc2c1055adba5d20380e591e621509dd7a976f800a194f889e80e201943f8e0c90ae6989ad37f056a70b8d10c5b60781cbfe391c69ae
SSDEEP 49152:wcGmHDT2oxtQBpQM/SJzOyFfWmdg9EASTZHYjqnXdEWDHh7Y53WHeUsQ+6WuDgRB:wwHXt9JzOy9TZHzXdZ+FWHeUcIm3
TLSH
T1C3E52951F213C11BC8637AB0CA4BC5F11AA1AE589826D49B31DA7F4FBB71B513E2D603
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1765392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

GetLastError SetLastError GetTickCount ExitProcess GetStartupInfoA GetStdHandle GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetCurrentProcess ReadProcessMemory GetModuleFileNameA GetModuleHandleA WriteFile ReadFile CloseHandle SetFilePointer SetEndOfFile FreeLibrary GetSystemInfo LoadLibraryA GetProcAddress DeleteFileW CreateFileW GetFileAttributesW CreateDirectoryW SetCurrentDirectoryW GetCurrentDirectoryW GetConsoleMode GetConsoleOutputCP GetOEMCP GetProcessHeap HeapAlloc HeapFree TlsAlloc TlsGetValue TlsSetValue CreateThread ExitThread LocalAlloc LocalFree Sleep SuspendThread ResumeThread TerminateThread WaitForSingleObject SetThreadPriority GetThreadPriority CreateEventA ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection MultiByteToWideChar WideCharToMultiByte GetACP GetConsoleCP SetUnhandledExceptionFilter EnumResourceTypesA EnumResourceNamesA EnumResourceLanguagesA FindResourceA FindResourceExA LoadResource SizeofResource LockResource FreeResource GetEnvironmentStringsA FreeEnvironmentStringsA FormatMessageA GlobalAddAtomA GetWindowsDirectoryA GetVersionExA CompareStringA GetLocaleInfoA GetDateFormatA EnumCalendarInfoA GetEnvironmentStringsW FreeEnvironmentStringsW FormatMessageW GetModuleFileNameW GetCommandLineW FindFirstFileW FindNextFileW CompareStringW GetLocaleInfoW GlobalAlloc GlobalReAlloc GlobalSize GlobalLock GlobalUnlock VirtualFree GetExitCodeProcess GetExitCodeThread GlobalDeleteAtom FindClose MulDiv GetSystemTime GetLocalTime SystemTimeToTzSpecificLocalTime FileTimeToLocalFileTime FileTimeToSystemTime FileTimeToDosDateTime PeekNamedPipe QueryPerformanceCounter GetThreadLocale SetThreadLocale GetUserDefaultLCID

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen SafeArrayCreate SafeArrayRedim SafeArrayGetUBound SafeArrayGetLBound SafeArrayAccessData SafeArrayUnaccessData SafeArrayGetElement SafeArrayPutElement SafeArrayPtrOfIndex VariantChangeTypeEx VariantClear VariantCopy VariantInit

user32

MessageBoxA CharUpperBuffW CharLowerBuffW PeekMessageA SendMessageA PostMessageA DefWindowProcA CallWindowProcA RegisterClassA UnregisterClassA GetClassInfoA CreateWindowExA RegisterClipboardFormatA GetClipboardFormatNameA CharToOemA CharUpperA CharUpperBuffA CharLowerA CharLowerBuffA GetMenuItemInfoA SetPropA GetPropA RemovePropA EnumPropsA GetWindowLongA SetWindowLongA SetClassLongA GetClassNameA LoadBitmapA LoadCursorA LoadIconA LoadImageA SystemParametersInfoA DispatchMessageW PeekMessageW SendMessageW DefWindowProcW CallWindowProcW RegisterClassW UnregisterClassW GetClassInfoW CreateWindowExW InsertMenuItemW GetMenuItemInfoW SetMenuItemInfoW DrawTextW DrawStateW SetWindowTextW GetWindowTextW GetWindowTextLengthW MessageBoxW GetWindowLongW SetWindowLongW TranslateMessage PostQuitMessage GetDoubleClickTime IsWindow IsMenu DestroyWindow ShowWindow ShowWindowAsync ShowOwnedPopups SetWindowPos GetWindowPlacement SetWindowPlacement BeginDeferWindowPos DeferWindowPos EndDeferWindowPos IsWindowVisible IsIconic BringWindowToTop IsZoomed OpenClipboard CloseClipboard SetClipboardData GetClipboardData CountClipboardFormats EnumClipboardFormats EmptyClipboard IsClipboardFormatAvailable SetFocus GetActiveWindow GetFocus GetKeyState GetCapture SetCapture ReleaseCapture MsgWaitForMultipleObjects SetTimer KillTimer EnableWindow IsWindowEnabled GetSystemMetrics GetMenu SetMenu DrawMenuBar GetSystemMenu CreateMenu CreatePopupMenu DestroyMenu EnableMenuItem GetSubMenu GetMenuItemCount RemoveMenu DeleteMenu UpdateWindow SetActiveWindow GetForegroundWindow SetForegroundWindow WindowFromDC GetDC GetDCEx GetWindowDC ReleaseDC BeginPaint EndPaint GetUpdateRect SetWindowRgn InvalidateRect InvalidateRgn RedrawWindow ScrollWindowEx ShowScrollBar EnableScrollBar GetClientRect GetWindowRect AdjustWindowRectEx MessageBeep SetCursorPos SetCursor GetCursorPos CreateCaret DestroyCaret HideCaret ShowCaret SetCaretPos GetCaretPos ClientToScreen ScreenToClient MapWindowPoints WindowFromPoint GetSysColor GetSysColorBrush SetSysColors DrawFocusRect FillRect FrameRect SetRect InflateRect IntersectRect OffsetRect GetDesktopWindow GetParent SetParent EnumThreadWindows GetTopWindow GetWindowThreadProcessId GetLastActivePopup GetWindow CallNextHookEx DestroyCursor DestroyIcon CopyImage CreateIconIndirect GetIconInfo SetScrollInfo GetScrollInfo DrawEdge DrawFrameControl TrackPopupMenuEx ChildWindowFromPointEx FlashWindowEx

gdi32

CreateFontIndirectA EnumFontFamiliesA GetCharABCWidthsA GetTextExtentPointA GetTextMetricsA GetObjectA ExtTextOutA CreateFontIndirectW EnumFontFamiliesExW GetCharABCWidthsW GetTextExtentPoint32W GetTextExtentExPointW GetObjectW TextOutW ExtTextOutW GetRandomRgn Arc BitBlt Chord CombineRgn CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDIBitmap CreateEllipticRgn CreatePen CreatePenIndirect CreatePatternBrush CreateRectRgn CreateRoundRectRgn CreateSolidBrush DeleteDC DeleteObject Ellipse EqualRgn ExcludeClipRect ExtCreateRegion ExtFloodFill FillRgn GetROP2 GetBkColor GetBitmapBits GetClipBox GetClipRgn GetCurrentObject GetDeviceCaps GetDIBits GetMapMode GetObjectType GetPixel GetRegionData GetRgnBox GetStockObject GetTextAlign GetTextColor GetViewportExtEx GetViewportOrgEx GetWindowExtEx GetWindowOrgEx IntersectClipRect LineTo MaskBlt OffsetRgn PatBlt Pie PaintRgn PtInRegion RectInRegion RectVisible Rectangle RestoreDC RealizePalette RoundRect SaveDC SelectClipRgn ExtSelectClipRgn SelectObject SelectPalette SetBkColor SetBkMode SetMapMode SetPixel SetPolyFillMode StretchBlt SetRectRgn SetROP2 SetStretchBltMode SetTextCharacterExtra SetTextColor SetTextAlign CreateDIBSection SetArcDirection ExtCreatePen MoveToEx CreatePolygonRgn DPtoLP LPtoDP Polygon Polyline PolyBezier SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx SetBrushOrgEx GetDCOrgEx

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

shell32

DragQueryFileA DragQueryFileW ShellExecuteW DragFinish DragAcceptFiles SHGetSpecialFolderPathA SHGetSpecialFolderPathW SHGetPathFromIDListW SHBrowseForFolderW

ole32

OleInitialize OleUninitialize CoCreateInstance CoTaskMemAlloc CoTaskMemFree

comctl32

InitCommonControls ImageList_Create ImageList_Destroy ImageList_GetImageCount ImageList_SetImageCount ImageList_Add ImageList_Replace ImageList_AddMasked ImageList_DrawEx ImageList_DrawIndirect ImageList_Remove ImageList_Copy ImageList_BeginDrag ImageList_EndDrag ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock _TrackMouseEvent

shlwapi

AssocQueryStringW

comdlg32

CommDlgExtendedError GetOpenFileNameW GetSaveFileNameW

Name

.text

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

369KB

Virtual Size

372KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

455KB

Virtual Size

456KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

24KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

11KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

522KB

Virtual Size

524KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-17_212885023507b1f98b1b4c9901ad96b1_elex_helldown_remcos

kernel32

oleaut32

user32

gdi32

version

shell32

ole32

comctl32

shlwapi

comdlg32

generic