General
- Target 2026-04-23_99be0dcb37b1dc0f78000bcdd5402fa4_elex_stop
- Size 596KB
- Sample260423-envwcsat9x
- SHA256 47aa9097a118c0e55d043c3f332f0b13d61f92bc287e6a068614ca06887d6bc9
- MD5 99be0dcb37b1dc0f78000bcdd5402fa4
- SHA1 ef0fce9156488ca76447220a0ead75236b9f27d7
- SHA512 666c57168c4b6b9deaa93e019e26a6b74fa074dd90fff9f696c3c8b9c9dff048fd56e9eb55fdc9a439585b2e7b49adb9af33955f326c9d5a4eacb55d1277d9ae
- SSDEEP 12288:gX8Djadu8J4YSjX/THmxr1bBGsHrGJYbGmb3brG:y8DGHJLUzmx1NGwG6ymj/G
- TLSH T149D4F100B6E1C4B7D9AA417D4816CF29A366B4856B76BBC36BDC128D6E372C35B37700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-23_99be0dcb37b1dc0f78000bcdd5402fa4_elex_stop.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-23_99be0dcb37b1dc0f78000bcdd5402fa4_elex_stop.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-23_99be0dcb37b1dc0f78000bcdd5402fa4_elex_stop
- Size 596KB
- SHA256 47aa9097a118c0e55d043c3f332f0b13d61f92bc287e6a068614ca06887d6bc9
- MD5 99be0dcb37b1dc0f78000bcdd5402fa4
- SHA1 ef0fce9156488ca76447220a0ead75236b9f27d7
- SHA512 666c57168c4b6b9deaa93e019e26a6b74fa074dd90fff9f696c3c8b9c9dff048fd56e9eb55fdc9a439585b2e7b49adb9af33955f326c9d5a4eacb55d1277d9ae
- SSDEEP 12288:gX8Djadu8J4YSjX/THmxr1bBGsHrGJYbGmb3brG:y8DGHJLUzmx1NGwG6ymj/G
- TLSH T149D4F100B6E1C4B7D9AA417D4816CF29A366B4856B76BBC36BDC128D6E372C35B37700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with aPLib.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Checks for any installed AV software in registry
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1