2026-08-24_ad42e164a01c5fb3078ce9129fed44d6_elex_maze_remcos_stealc

General

Target
2026-08-24_ad42e164a01c5fb3078ce9129fed44d6_elex_maze_remcos_stealc
Size 407KB
Sample260825-e2jegsfh49
SHA256 141502e1ad44c9fc9d0d7e1d96435ba65638ac1a92731a4b866089d5b10ebe1c
MD5 ad42e164a01c5fb3078ce9129fed44d6
SHA1 54d8a1cf654b44519e81fed586615d693c8863a5
SHA512 1ac2f2ff532d69d69f844d5493dd9d766d725c963d9564f2eec6ad0eef7da687fb77a22d0a5ce527c1e061403cc28f8e09ec5306b7ee48f41b4639a64b1bdd50
SSDEEP 6144:Vx0YiAV+1M9eUrg0eXlK/UAhnvaaTt7ffQjX39Cj2Qe80WU/E:VCYtV+6Brg5K/ndaOt7fm3oj2Qez/E
TLSH
T1F1949D21F7C0D930E07A86B51C78EB3101ED7AB21F79A9CBBBC445898AB45E16735B13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-24_ad42e164a01c5fb3078ce9129fed44d6_elex_maze_remcos_stealc

File Explorer

2026-08-24_ad42e164a01c5fb3078ce9129fed44d6_elex_maze_remcos_stealc

.exe 407KB

2026-08-24_ad42e164a01c5fb3078ce9129fed44d6_elex_maze_remcos_stealc

IMPHASH a937ee21afc8da8c636807fc65975a17
SHA256 141502e1ad44c9fc9d0d7e1d96435ba65638ac1a92731a4b866089d5b10ebe1c
MD5 ad42e164a01c5fb3078ce9129fed44d6
SHA1 54d8a1cf654b44519e81fed586615d693c8863a5
SHA512 1ac2f2ff532d69d69f844d5493dd9d766d725c963d9564f2eec6ad0eef7da687fb77a22d0a5ce527c1e061403cc28f8e09ec5306b7ee48f41b4639a64b1bdd50
SSDEEP 6144:Vx0YiAV+1M9eUrg0eXlK/UAhnvaaTt7ffQjX39Cj2Qe80WU/E:VCYtV+6Brg5K/ndaOt7fm3oj2Qez/E
TLSH
T1F1949D21F7C0D930E07A86B51C78EB3101ED7AB21F79A9CBBBC445898AB45E16735B13
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

152644

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess CreateThread GetModuleHandleA GetProcAddress EncodePointer DecodePointer GetLastError ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte HeapFree HeapAlloc GetSystemTimeAsFileTime GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent HeapSize IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection FatalAppExitA UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount CreateEventW Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetTickCount GetModuleHandleW CreateSemaphoreW GetStdHandle WriteFile GetModuleFileNameW SetConsoleCtrlHandler FreeLibrary LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThread GetCurrentThreadId GetProcessHeap FindClose FindFirstFileExW GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc OutputDebugStringW GetStringTypeW FileTimeToLocalFileTime GetFileInformationByHandle PeekNamedPipe GetFullPathNameW SetCurrentDirectoryW GetCurrentDirectoryW CreateFileW SetStdHandle SetFilePointerEx WriteConsoleW GetTimeZoneInformation SetEndOfFile ReadFile ReadConsoleW GetFullPathNameA SetEnvironmentVariableA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-24_ad42e164a01c5fb3078ce9129fed44d6_elex_maze_remcos_stealc

kernel32

generic