2026-06-02_dc47cfa557c188f2f26478c398b9db21_elex_mafia

General

Target
2026-06-02_dc47cfa557c188f2f26478c398b9db21_elex_mafia
Size 518KB
Sample260602-ns2ddads2l
SHA256 3e5cfe599c863ebe3f6629e36c77a278e9893d86f596b2875e18498c92a23e4e
MD5 dc47cfa557c188f2f26478c398b9db21
SHA1 9d007005a00cd88cf37a302a82854823962afb8e
SHA512 3d5ebee2fe728761e06431a6c49206685a57e33b5b6e339ed578f5281dbdaaa5d29d0f27ee704c77b1d4e176d806b8d523ecc2a45571dbce6ecadd092a5dd77f
SSDEEP 12288:Jf1yBOtIZdpH+IKeR0aP1utZgxujjY+cbPKz5H+NZ:JfcBzZdcIKU0OutZEpKz5eN
TLSH
T155B4F111B984C036E19202718B56EB92583F7D75CB36A8CB7BC436BE6EB12D1D274347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-02_dc47cfa557c188f2f26478c398b9db21_elex_mafia

File Explorer

2026-06-02_dc47cfa557c188f2f26478c398b9db21_elex_mafia

.exe 518KB

2026-06-02_dc47cfa557c188f2f26478c398b9db21_elex_mafia

IMPHASH 6dca3e9fb3928bbdb54dbce669943ec8
SHA256 3e5cfe599c863ebe3f6629e36c77a278e9893d86f596b2875e18498c92a23e4e
MD5 dc47cfa557c188f2f26478c398b9db21
SHA1 9d007005a00cd88cf37a302a82854823962afb8e
SHA512 3d5ebee2fe728761e06431a6c49206685a57e33b5b6e339ed578f5281dbdaaa5d29d0f27ee704c77b1d4e176d806b8d523ecc2a45571dbce6ecadd092a5dd77f
SSDEEP 12288:Jf1yBOtIZdpH+IKeR0aP1utZgxujjY+cbPKz5H+NZ:JfcBzZdcIKU0OutZEpKz5eN
TLSH
T155B4F111B984C036E19202718B56EB92583F7D75CB36A8CB7BC436BE6EB12D1D274347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetComputerNameW GetLocalTime SystemTimeToFileTime FileTimeToSystemTime SizeofResource LockResource LoadResource FindResourceW FindResourceExW MultiByteToWideChar GetProcAddress LoadLibraryW GetCurrentProcess LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetLastError CloseHandle WideCharToMultiByte MoveFileW DeleteFileW CreateDirectoryW SetFileAttributesW GetTempPathW GetTempFileNameW MoveFileExW lstrlenW CreateFileW GetFileSize ReadFile WriteFile Sleep GetComputerNameA GetModuleFileNameW CreateProcessW GetSystemTime FileTimeToLocalFileTime RaiseException InitializeCriticalSectionAndSpinCount HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap LocalAlloc SetEndOfFile SetStdHandle WriteConsoleW FreeLibrary LoadLibraryA InterlockedIncrement InterlockedDecrement InterlockedExchange EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW GetCurrentThreadId RtlUnwind LCMapStringW GetCPInfo SetUnhandledExceptionFilter ExitProcess GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetConsoleCP GetConsoleMode GetACP GetOEMCP IsValidCodePage SetFilePointer FlushFileBuffers GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW

ole32

CoCreateInstance CoInitialize

shlwapi

PathIsRootW PathFileExistsW PathAppendW PathAddExtensionW PathRemoveExtensionW

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-02_dc47cfa557c188f2f26478c398b9db21_elex_mafia

kernel32

ole32

shlwapi

generic