2026-10-11_8636dd3772945ea106ca0e4894b5f8c1_agent-tesla_elex_maze_remcos_xloader

General

Target
2026-10-11_8636dd3772945ea106ca0e4894b5f8c1_agent-tesla_elex_maze_remcos_xloader
Size 1.5MB
Sample261012-vm651acz2w
SHA256 6ffd01ef46258493d077bc8a50ab599678609cc54ebcefe890f71d9d43354b04
MD5 8636dd3772945ea106ca0e4894b5f8c1
SHA1 320be0ff51602ccd30a57ee43c25aa4f61b8c6ac
SHA512 ef14ddd1fa16e4c271b4c239385c3f45f9e3bd6a258e29a753fb46c8126e3770ef1d59be42c52c08c2d6e96bdb54b43ece0364377858c84be98ce8ed7750dc85
SSDEEP 24576:nY8vXao0u7OPaRM9U2mkUaUratlr3vkxhmBIolFd5WjzPS0AK1dPxG:z90uC+6rmkU5ratGUdAO0BdPxG
TLSH
T19175C073A39D8391CB125272BD6763456F7F3C214A30785B2ED83D396AB12F1521CAA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-11_8636dd3772945ea106ca0e4894b5f8c1_agent-tesla_elex_maze_remcos_xloader

2026-10-11_8636dd3772945ea106ca0e4894b5f8c1_agent-tesla_elex_maze_remcos_xloader

.exe 1.5MB

SHA256 6ffd01ef46258493d077bc8a50ab599678609cc54ebcefe890f71d9d43354b04
MD5 8636dd3772945ea106ca0e4894b5f8c1
SHA1 320be0ff51602ccd30a57ee43c25aa4f61b8c6ac
SHA512 ef14ddd1fa16e4c271b4c239385c3f45f9e3bd6a258e29a753fb46c8126e3770ef1d59be42c52c08c2d6e96bdb54b43ece0364377858c84be98ce8ed7750dc85
SSDEEP 24576:nY8vXao0u7OPaRM9U2mkUaUratlr3vkxhmBIolFd5WjzPS0AK1dPxG:z90uC+6rmkU5ratGUdAO0BdPxG
TLSH
T19175C073A39D8391CB125272BD6763456F7F3C214A30785B2ED83D396AB12F1521CAA3
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

163277

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths