2026-08-27_dcb59d95754d65836c5d023716fa11a1_amadey_elex_floxif_remcos_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-27_dcb59d95754d65836c5d023716fa11a1_amadey_elex_floxif_remcos_stealc_stop
Size 377KB
Sample260828-e6w65stbjh
SHA256 6a7235455feef2fd360b517b5ca6b3a6d0b8bb7ee83c0558f8ea1a0d74c92203
MD5 dcb59d95754d65836c5d023716fa11a1
SHA1 f2221e0b6252230baa325fa01067f91b0a80b94c
SHA512 a373ab9319d1deaa803cc69ecf5bb520d6be2adcca91eddc7e70160ab641e138c47f0fe83d343fdce193419f0e7dc97472905b3e1f413079a678e44fc83aee60
SSDEEP 6144:kLS3d8RAsH4/MEV94S1NwBk818wcdRkO+F++ccGlKeAOoM+mBV+UdvrEFp7hKtgT:cS3dOn4/MEV66NwS818wWkOlGRemMbBg
TLSH
T1F984BF25F78183F1C9412535765B9B26D6BA623C073913D3E3E11E1C6E2C3E1AA3A74B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-27_dcb59d95754d65836c5d023716fa11a1_amadey_elex_floxif_remcos_stealc_stop

File Explorer

2026-08-27_dcb59d95754d65836c5d023716fa11a1_amadey_elex_floxif_remcos_stealc_stop

.exe 377KB

2026-08-27_dcb59d95754d65836c5d023716fa11a1_amadey_elex_floxif_remcos_stealc_stop

IMPHASH 03c061631c4d8d3b0b9b6dfa59a87baa
SHA256 6a7235455feef2fd360b517b5ca6b3a6d0b8bb7ee83c0558f8ea1a0d74c92203
MD5 dcb59d95754d65836c5d023716fa11a1
SHA1 f2221e0b6252230baa325fa01067f91b0a80b94c
SHA512 a373ab9319d1deaa803cc69ecf5bb520d6be2adcca91eddc7e70160ab641e138c47f0fe83d343fdce193419f0e7dc97472905b3e1f413079a678e44fc83aee60
SSDEEP 6144:kLS3d8RAsH4/MEV94S1NwBk818wcdRkO+F++ccGlKeAOoM+mBV+UdvrEFp7hKtgT:cS3dOn4/MEV66NwS818wWkOlGRemMbBg
TLSH
T1F984BF25F78183F1C9412535765B9B26D6BA623C073913D3E3E11E1C6E2C3E1AA3A74B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

162870

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

dinput8

DirectInput8Create

dsound

ord11

ddraw

DirectDrawCreateEx

winmm

timeBeginPeriod timeGetTime mmioOpenA mmioDescend mmioRead mmioAscend mmioSeek mmioGetInfo mmioAdvance mmioSetInfo

kernel32

GetModuleHandleA CloseHandle PurgeComm SetCommMask ClearCommError GetOverlappedResult GetLastError WriteFile ReadFile WaitCommEvent CreateEventA CreateThread SetCommTimeouts SetCommState GetCommState CreateFileA SetFilePointer MultiByteToWideChar WideCharToMultiByte GetTickCount LeaveCriticalSection EnterCriticalSection CreateDirectoryA InitializeCriticalSection SetLocalTime GetLocalTime SetEvent WaitForSingleObject ResetEvent GetCommMask GetCommTimeouts GetCurrentProcess GetPrivateProfileStringA GetDriveTypeA Sleep SetStdHandle CompareStringA GetStringTypeW GetStringTypeA GetLocaleInfoA WriteConsoleW GetConsoleOutputCP WriteConsoleA GetProcessHeap SetEndOfFile LCMapStringW LCMapStringA GetTimeZoneInformation FlushFileBuffers IsValidCodePage GetOEMCP GetACP GetCPInfo LoadLibraryA GetFullPathNameA InterlockedDecrement InitializeCriticalSectionAndSpinCount HeapSize GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetConsoleMode GetConsoleCP CompareStringW GetCurrentThreadId HeapFree HeapAlloc FindClose FileTimeToSystemTime FileTimeToLocalFileTime FindFirstFileA RaiseException RtlUnwind SetEnvironmentVariableA GetCurrentDirectoryA GetSystemTimeAsFileTime GetFileInformationByHandle PeekNamedPipe GetFileType GetCommandLineA GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection VirtualAlloc HeapReAlloc GetModuleHandleW GetProcAddress ExitProcess GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError SetHandleCount

user32

DispatchMessageA PostQuitMessage ChangeDisplaySettingsA PostMessageA SetRect UpdateWindow ShowWindow CreateWindowExA GetAsyncKeyState LoadStringA ShowCursor PeekMessageA GetMessageA TranslateMessage MessageBoxA LoadIconA LoadCursorA RegisterClassExA DefWindowProcA ExitWindowsEx SystemParametersInfoA

gdi32

CreateFontA DeleteObject

advapi32

LookupPrivilegeValueA OpenProcessToken AdjustTokenPrivileges

iphlpapi

GetAdaptersInfo

ws2_32

htons

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-27_dcb59d95754d65836c5d023716fa11a1_amadey_elex_floxif_remcos_stealc_stop

dinput8

dsound

ddraw

winmm

kernel32

user32

gdi32

advapi32

iphlpapi

ws2_32

generic