General

  • Target
    2026-09-16_1df1c7bbb927f8f451656ebc45f961fa_coinminer_elex_remcos_stealc_stop
  • Size 1.5MB
  • Sample260916-3cvm8agn6x
  • SHA256 aaa2d485736171ee8cca7fb457cac0d126b06310b167326f847d7def6f0f7011
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-09-16_1df1c7bbb927f8f451656ebc45f961fa_coinminer_elex_remcos_stealc_stop
    .exe 1.5MB

2026-09-16_1df1c7bbb927f8f451656ebc45f961fa_coinminer_elex_remcos_stealc_stop

  • IMPHASH 589e026568a4e218e69e9a6dfc56d6f9
  • SHA256 aaa2d485736171ee8cca7fb457cac0d126b06310b167326f847d7def6f0f7011
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
5
Entry point
855279
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
e:\project\ime_comp\branch\PinyinDev_R_8_9\Bin\SogouPdb\Component\PicFace\SGPicFaceTool.pdb