2026-10-22_439988fae7e9d76aa3b17c3c6018dd9e_elex_icloader_remcos_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_439988fae7e9d76aa3b17c3c6018dd9e_elex_icloader_remcos_stop
Size 2.0MB
Sample261024-sfnc7sfb72
SHA256 d81d1b4787caf13c956f1c6d8d59d4f4973ef3c4fd2cbafd5723a7426d832772
MD5 439988fae7e9d76aa3b17c3c6018dd9e
SHA1 47d6789086a4e49b0e1e44c636d66a5ccbe85241
SHA512 c779d77f6ab4f6b317ad7216302e0e350bb8ccec19652fa570d8ea8638aa6fe37cd80af03bd784108e840e6b328b25cde6892f6550e28ecd37ffbc67fe2fe1fb
SSDEEP 49152:Ph/VNnrhAfEWDzPDsPGmt4SO+eMVwKFG:J/zi8WToPGmtGMtG
TLSH
T183A502A3F3C588B8D5A681B249FA04649836BD551733DF9F364CE42D6FB8A90D932343
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_439988fae7e9d76aa3b17c3c6018dd9e_elex_icloader_remcos_stop

File Explorer

2026-10-22_439988fae7e9d76aa3b17c3c6018dd9e_elex_icloader_remcos_stop

.exe 2.0MB

2026-10-22_439988fae7e9d76aa3b17c3c6018dd9e_elex_icloader_remcos_stop

IMPHASH 9182809c4b21a0f8b6b533a3dbca7bb5
SHA256 d81d1b4787caf13c956f1c6d8d59d4f4973ef3c4fd2cbafd5723a7426d832772
MD5 439988fae7e9d76aa3b17c3c6018dd9e
SHA1 47d6789086a4e49b0e1e44c636d66a5ccbe85241
SHA512 c779d77f6ab4f6b317ad7216302e0e350bb8ccec19652fa570d8ea8638aa6fe37cd80af03bd784108e840e6b328b25cde6892f6550e28ecd37ffbc67fe2fe1fb
SSDEEP 49152:Ph/VNnrhAfEWDzPDsPGmt4SO+eMVwKFG:J/zi8WToPGmtGMtG
TLSH
T183A502A3F3C588B8D5A681B249FA04649836BD551733DF9F364CE42D6FB8A90D932343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

797616

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVolumeInformationW GlobalFindAtomW GetVersion GetModuleHandleW GetProcAddress GetModuleHandleA LoadLibraryA SetLastError IsBadReadPtr GetStringTypeA LCMapStringW LCMapStringA MultiByteToWideChar HeapReAlloc VirtualAlloc HeapAlloc GetOEMCP GetCPInfo WriteFile GetDateFormatA HeapFree VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA RemoveDirectoryA GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings WideCharToMultiByte FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleFileNameA UnhandledExceptionFilter GetCurrentProcess TerminateProcess ExitProcess GetCommandLineA GetStartupInfoA CreateMutexW GetSystemDirectoryW GlobalFlags GetStringTypeW FindResourceExW GetExitCodeThread TerminateThread EnterCriticalSection GetExitCodeProcess GetTempPathA GetShortPathNameA GetCurrentThreadId GetTickCount FindNextFileA SetCurrentDirectoryA SetFileAttributesA SetCurrentDirectoryW GetSystemInfo OpenProcess CreateDirectoryA SizeofResource GlobalUnlock GetTimeZoneInformation SetEndOfFile GetTimeFormatA CreateThread ResumeThread GetConsoleCP ReleaseMutex DuplicateHandle FormatMessageW RaiseException ResetEvent IsValidCodePage FlushFileBuffers SearchPathA lstrcmpiA CreateIoCompletionPort LeaveCriticalSection PostQueuedCompletionStatus GetFileType GetDiskFreeSpaceA GetACP GetSystemTimeAsFileTime CreateFileMappingA FreeLibrary CloseHandle RtlUnwind GetVersionExA

user32

LoadMenuW BeginPaint ReleaseDC CheckDlgButton DestroyWindow SendMessageTimeoutA SetFocus CheckMenuRadioItem ClientToScreen GetSystemMenu IsWindowEnabled CreateWindowExW GetWindowLongA TranslateMessage CreatePopupMenu LoadStringW EmptyClipboard SetClassLongW GetKeyState SetWindowPos CharLowerBuffW LoadAcceleratorsW AppendMenuW GetMessagePos GetClientRect SendMessageW DestroyMenu MoveWindow DispatchMessageW SetClipboardData GetClassInfoExW GetWindowLongW EndDialog SetCursor GetParent TranslateAcceleratorW CharNextW LoadBitmapA GetSysColor SetWindowLongW

gdi32

CreateRectRgnIndirect RectVisible EnumFontsA GetDIBits Escape DeleteDC SetViewportOrgEx GetTextColor CreateFontIndirectA SelectObject SetMapMode SetBkMode CreateBitmap GetBkColor RestoreDC GetStockObject SetBkColor GetClipBox CreateFontIndirectW SaveDC SetTextColor GetWindowExtEx ScaleWindowExtEx OffsetViewportOrgEx GetObjectW GetDeviceCaps GetRgnBox SetWindowExtEx

advapi32

IsValidSid RegEnumKeyExW RegDeleteKeyW RegEnumValueW RegCreateKeyExW AllocateLocallyUniqueId RegDeleteValueW RegQueryValueW EqualSid RegOpenKeyW RegEnumKeyW FreeSid RegOpenKeyExW AllocateAndInitializeSid GetSidSubAuthority RegQueryValueExW RegCloseKey RegQueryInfoKeyW

shell32

ShellExecuteW Shell_NotifyIconW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_439988fae7e9d76aa3b17c3c6018dd9e_elex_icloader_remcos_stop

kernel32

user32

gdi32

advapi32

shell32

generic