General

  • Target
    2026-10-14_be03565af9346e9d8214d4498b065fa6_elex_remcos_stop
  • Size 2.1MB
  • Sample261014-qa99nsdv41
  • SHA256 59f3fb5a1b5b1b831e2ba143a7d5762efe1f2faca68dbcbb3a70d8dd0a4b4d84
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-10-14_be03565af9346e9d8214d4498b065fa6_elex_remcos_stop
    .exe 2.1MB

2026-10-14_be03565af9346e9d8214d4498b065fa6_elex_remcos_stop

  • IMPHASH bed157666afc76a8acd63c1aaed16f5e
  • SHA256 59f3fb5a1b5b1b831e2ba143a7d5762efe1f2faca68dbcbb3a70d8dd0a4b4d84
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
500567
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\PC_SOFT_BUILD\Build\Build_Src\kisengine_git\tools_pdf_jiguang_20220907\product\win32\dbginfo\kfpnewupdate.pdb