General
- Target 2026-05-05_aea3596a03d4979157b41272ab940127_elex_stop
- Size 811KB
- Sample260505-p6n6msgv8t
- SHA256 1bb81d0993428464d0787072f907310aacf3651a3f60ae150b0a4118d2b1049f
- MD5 aea3596a03d4979157b41272ab940127
- SHA1 ba9a91884ecb2eddc394048740e5e4075181d9bd
- SHA512 2c45df4444e756335f20c1ac16be32c7e9aa7eaee471fd6aedc31152b584407a4acd81c87c49b7f7d261253f7825aa8b7996fa5f7b0ff122d13a818205e1324d
- SSDEEP 6144:tpqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnCH:tpqiC/2OGAtkCP4cejGSOpRK3CnIi
- TLSH T189058E0273D680F1D85238711567E26A9B797D154726CE9BEBE03E339D311B0AF2A372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-05_aea3596a03d4979157b41272ab940127_elex_stop.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-05_aea3596a03d4979157b41272ab940127_elex_stop.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_aea3596a03d4979157b41272ab940127_elex_stop
- Size 811KB
- SHA256 1bb81d0993428464d0787072f907310aacf3651a3f60ae150b0a4118d2b1049f
- MD5 aea3596a03d4979157b41272ab940127
- SHA1 ba9a91884ecb2eddc394048740e5e4075181d9bd
- SHA512 2c45df4444e756335f20c1ac16be32c7e9aa7eaee471fd6aedc31152b584407a4acd81c87c49b7f7d261253f7825aa8b7996fa5f7b0ff122d13a818205e1324d
- SSDEEP 6144:tpqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnCH:tpqiC/2OGAtkCP4cejGSOpRK3CnIi
- TLSH T189058E0273D680F1D85238711567E26A9B797D154726CE9BEBE03E339D311B0AF2A372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies WinLogon for persistence
Executes dropped EXE
Adds Run key to start application
AutoIT Executable
AutoIT scripts compiled to PE executables.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1