2026-08-18_a8529fb2cb4cd36cc038a60055dc11a7_amadey_elex_floxif_remcos_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-18_a8529fb2cb4cd36cc038a60055dc11a7_amadey_elex_floxif_remcos_stealc_stop
Size 428KB
Sample260818-cd4z6stfph
SHA256 a96b8e5c637a6e84658519314adce57437036e03ece894b0dc469dec1bbb48fc
MD5 a8529fb2cb4cd36cc038a60055dc11a7
SHA1 fc18c52c11e6ee5a395d5dc8609d58db19d4a0bc
SHA512 6c7b79eca9dbf1ccfea7bfbea73b0b298bb7a1dd63ff1b9480b352a788348743866378554a378734773dae7faa664eb08a0acc0b644628e7e82834058f40a3f7
SSDEEP 6144:+iwG1UmF7YM8LuMYw0GeH98x+bP0wZMlMSrGR2BfhWaAOWhCH+GBV+UdvrEFp7ha:+idUmF7YMQhgHOY70wkuGBjvrEH7jHU
TLSH
T1FA94AD55FB8083F9D5860934B54B9B27EA7A5B7C0B3072C7E3D03A1D1D783E16A3924A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-18_a8529fb2cb4cd36cc038a60055dc11a7_amadey_elex_floxif_remcos_stealc_stop

File Explorer

2026-08-18_a8529fb2cb4cd36cc038a60055dc11a7_amadey_elex_floxif_remcos_stealc_stop

.exe 428KB

2026-08-18_a8529fb2cb4cd36cc038a60055dc11a7_amadey_elex_floxif_remcos_stealc_stop

IMPHASH f390cdd9161680b06c9096416484616b
SHA256 a96b8e5c637a6e84658519314adce57437036e03ece894b0dc469dec1bbb48fc
MD5 a8529fb2cb4cd36cc038a60055dc11a7
SHA1 fc18c52c11e6ee5a395d5dc8609d58db19d4a0bc
SHA512 6c7b79eca9dbf1ccfea7bfbea73b0b298bb7a1dd63ff1b9480b352a788348743866378554a378734773dae7faa664eb08a0acc0b644628e7e82834058f40a3f7
SSDEEP 6144:+iwG1UmF7YM8LuMYw0GeH98x+bP0wZMlMSrGR2BfhWaAOWhCH+GBV+UdvrEFp7ha:+idUmF7YMQhgHOY70wkuGBjvrEH7jHU
TLSH
T1FA94AD55FB8083F9D5860934B54B9B27EA7A5B7C0B3072C7E3D03A1D1D783E16A3924A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

194086

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

dinput8

DirectInput8Create

dsound

ord11

ddraw

DirectDrawCreateEx

winmm

timeBeginPeriod timeGetTime mmioOpenA mmioDescend mmioRead mmioAscend mmioSeek mmioGetInfo mmioSetInfo mmioAdvance

kernel32

GetModuleHandleA CloseHandle PurgeComm SetCommMask ClearCommError GetOverlappedResult GetLastError WriteFile ReadFile WaitCommEvent CreateEventA CreateThread SetCommTimeouts SetCommState GetCommState CreateFileA SetFilePointer MultiByteToWideChar WideCharToMultiByte GetTickCount LeaveCriticalSection EnterCriticalSection CreateDirectoryA InitializeCriticalSection SetLocalTime GetLocalTime SetEvent WaitForSingleObject ResetEvent GetCommMask GetCommTimeouts _lclose SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetFileTime OpenFile GetCurrentProcess GetPrivateProfileStringA DeleteFileA Sleep GetConsoleCP CompareStringA GetProcessHeap SetEndOfFile GetStringTypeW GetStringTypeA GetLocaleInfoA WriteConsoleW GetConsoleOutputCP WriteConsoleA LCMapStringW LCMapStringA GetTimeZoneInformation FlushFileBuffers SetStdHandle IsValidCodePage GetOEMCP GetACP GetCPInfo LoadLibraryA GetFullPathNameA InterlockedDecrement InitializeCriticalSectionAndSpinCount HeapSize GetCurrentProcessId QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW GetCurrentThreadId FreeEnvironmentStringsW GetDriveTypeA CompareStringW GetEnvironmentStrings FreeEnvironmentStringsA HeapFree HeapAlloc FindClose FileTimeToLocalFileTime FindFirstFileA RaiseException RtlUnwind SetEnvironmentVariableA GetCurrentDirectoryA GetSystemTimeAsFileTime GetCommandLineA GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection VirtualAlloc HeapReAlloc GetModuleHandleW GetProcAddress ExitProcess GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetConsoleMode

user32

DispatchMessageA MessageBoxA ChangeDisplaySettingsA PostMessageA SetRect UpdateWindow ShowWindow CreateWindowExA GetAsyncKeyState LoadStringA ShowCursor PeekMessageA GetMessageA TranslateMessage SystemParametersInfoA LoadIconA LoadCursorA RegisterClassExA DefWindowProcA ExitWindowsEx PostQuitMessage

gdi32

CreateFontA DeleteObject

advapi32

LookupPrivilegeValueA OpenProcessToken AdjustTokenPrivileges

iphlpapi

GetAdaptersInfo

ws2_32

htons

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-18_a8529fb2cb4cd36cc038a60055dc11a7_amadey_elex_floxif_remcos_stealc_stop

dinput8

dsound

ddraw

winmm

kernel32

user32

gdi32

advapi32

iphlpapi

ws2_32

generic