2026-10-11_826fb1b240c3342623fe6e9de3b28b11_agent-tesla_elex_maze_remcos_xloader

General

Target
2026-10-11_826fb1b240c3342623fe6e9de3b28b11_agent-tesla_elex_maze_remcos_xloader
Size 1.5MB
Sample261012-vzb6dsec66
SHA256 06bf55ef8f7e7a59508ce7eae3a58260dd8ba32f7709209e985ce76b928d8594
MD5 826fb1b240c3342623fe6e9de3b28b11
SHA1 17b73dfd4379932192f20158c5fd39249a0292d1
SHA512 2c74c6516bfefb3e9267810f5b2916767c4f8a9ff5b78ccf67e521e223053976028c699b15891ccc4be9b4e0d141bdb029d21177ab605a6e7c1b8bd80bc9dc59
SSDEEP 24576:nY8vXao0u7OPaRM9U2mkUaC9aclr3vkxhmBIolFd5WjzPS0AK1dPxG:z90uC+6rmkU39acGUdAO0BdPxG
TLSH
T1F675C073A3DD8291CB125272BD6763456F7F3C214A30785B2ED83D396AB12F1521CAA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
sample	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-11_826fb1b240c3342623fe6e9de3b28b11_agent-tesla_elex_maze_remcos_xloader

2026-10-11_826fb1b240c3342623fe6e9de3b28b11_agent-tesla_elex_maze_remcos_xloader

.exe 1.5MB

SHA256 06bf55ef8f7e7a59508ce7eae3a58260dd8ba32f7709209e985ce76b928d8594
MD5 826fb1b240c3342623fe6e9de3b28b11
SHA1 17b73dfd4379932192f20158c5fd39249a0292d1
SHA512 2c74c6516bfefb3e9267810f5b2916767c4f8a9ff5b78ccf67e521e223053976028c699b15891ccc4be9b4e0d141bdb029d21177ab605a6e7c1b8bd80bc9dc59
SSDEEP 24576:nY8vXao0u7OPaRM9U2mkUaC9aclr3vkxhmBIolFd5WjzPS0AK1dPxG:z90uC+6rmkU39acGUdAO0BdPxG
TLSH
T1F675C073A3DD8291CB125272BD6763456F7F3C214A30785B2ED83D396AB12F1521CAA3
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

163277

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths