This article was originally published on ThreatChain — decentralized threat intelligence.

For $58 on a hacking forum, anyone can buy full remote control of your computer. Camera, keyboard, files — everything.

A new RemcosRAT sample was identified by threat intelligence feeds on 2026-04-24 17:40:38. This post breaks down what we know about the specific sample, how to recognize related activity on your network, and what to do if you or your organization might be affected.

The Sample at a Glance

Field Value

SHA-256 440836d991a02bc8e8d2e40b2d6512a78a6898ba0d4ef8188339e36584666bc9

File name Purchase_Order_2455.JS

File type js

Size 6.09 MB

Origin (first observed) US

First seen 2026-04-24 17:40:38

Family RemcosRAT

Tags js, RemcosRAT

VirusTotal detection 12/75 engines flagged malicious

What RemcosRAT Does

RemcosRAT is a malware family observed delivering malicious payloads to Windows systems.…