General
- Target 2026-04-15_35928b54e057bf7c5f0659cb5607e0a3_elex_stop
- Size 596KB
- Sample260415-3lx5psev2y
- SHA256 5d6df8b68ee601e53e7b73cd5afd4069510d0d214d476b4234d4da730631e42d
- MD5 35928b54e057bf7c5f0659cb5607e0a3
- SHA1 c15f641683be7725844168091e8a4c005de5a3b1
- SHA512 a2a7fbb5e9651da3d7c5388cad10a932fbeb178de249263ecc77c2287d8d536a89ee64768729ffa90c05fb181b23730b38f18e70b1d11fd1e135c88291523ae9
- SSDEEP 12288:ZX8Djadu8J4YSjX/THmxr1bBGsHrGJYbGmb3brG:R8DGHJLUzmx1NGwG6ymj/G
- TLSH T1F1D4F100B6E1C4B7D9AA417D4816CF29A366B4856B76BBC36BDC128D6E372C35B37700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_35928b54e057bf7c5f0659cb5607e0a3_elex_stop.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_35928b54e057bf7c5f0659cb5607e0a3_elex_stop.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_35928b54e057bf7c5f0659cb5607e0a3_elex_stop
- Size 596KB
- SHA256 5d6df8b68ee601e53e7b73cd5afd4069510d0d214d476b4234d4da730631e42d
- MD5 35928b54e057bf7c5f0659cb5607e0a3
- SHA1 c15f641683be7725844168091e8a4c005de5a3b1
- SHA512 a2a7fbb5e9651da3d7c5388cad10a932fbeb178de249263ecc77c2287d8d536a89ee64768729ffa90c05fb181b23730b38f18e70b1d11fd1e135c88291523ae9
- SSDEEP 12288:ZX8Djadu8J4YSjX/THmxr1bBGsHrGJYbGmb3brG:R8DGHJLUzmx1NGwG6ymj/G
- TLSH T1F1D4F100B6E1C4B7D9AA417D4816CF29A366B4856B76BBC36BDC128D6E372C35B37700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with aPLib.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Checks for any installed AV software in registry
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1