2026-06-28_84127120c0ba9ecf8ef910874c89eb10_elex_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-28_84127120c0ba9ecf8ef910874c89eb10_elex_stop
Size 5.2MB
Sample260628-zz5vxset3v
SHA256 3402e3128ebf10cac47444ca94d857c7ea9e82199956ae78ddde8475e753e3c0
MD5 84127120c0ba9ecf8ef910874c89eb10
SHA1 c81af6b4b08b7e4a46ee517f1a35393341de0fdf
SHA512 d932ae053d3a8a8d7150ae63da32118cce54ff17c4be91c2be0660fa95638be89b5e7da4e7bb301545dceff84cf70014f878e1c82abca4cfbce4ce8456fae580
SSDEEP 98304:R1fZpn+8vcAA0UzZPQLgYGYOutY2PNDzo3+HuVOJ:Pfrc6ONT6OmpP+uOVOJ
TLSH
T14F46F1432BE640B9D68F65B511B3AB1FF772A625071280F7D7D03DC1AA217C26A347E2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-28_84127120c0ba9ecf8ef910874c89eb10_elex_stop

File Explorer

2026-06-28_84127120c0ba9ecf8ef910874c89eb10_elex_stop

.exe 5.2MB

2026-06-28_84127120c0ba9ecf8ef910874c89eb10_elex_stop

IMPHASH 78ea46403069cc2cd25c38a6976157e3
SHA256 3402e3128ebf10cac47444ca94d857c7ea9e82199956ae78ddde8475e753e3c0
MD5 84127120c0ba9ecf8ef910874c89eb10
SHA1 c81af6b4b08b7e4a46ee517f1a35393341de0fdf
SHA512 d932ae053d3a8a8d7150ae63da32118cce54ff17c4be91c2be0660fa95638be89b5e7da4e7bb301545dceff84cf70014f878e1c82abca4cfbce4ce8456fae580
SSDEEP 98304:R1fZpn+8vcAA0UzZPQLgYGYOutY2PNDzo3+HuVOJ:Pfrc6ONT6OmpP+uOVOJ
TLSH
T14F46F1432BE640B9D68F65B511B3AB1FF772A625071280F7D7D03DC1AA217C26A347E2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

312056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatW LoadLibraryW GetTickCount lstrcmpiA VirtualQuery VirtualProtect IsBadWritePtr SetEnvironmentVariableA lstrcmpiW InterlockedIncrement InterlockedDecrement SetLastError HeapFree GetProcessHeap HeapReAlloc HeapAlloc FindResourceExA GetUserDefaultUILanguage GetCurrentProcessId CloseHandle WaitForSingleObject CompareStringA GetLastError GetEnvironmentVariableA CompareStringW SetEvent lstrcpyW FindFirstFileW FindClose FormatMessageA GetSystemTimeAsFileTime WriteFile SetFileTime CreateFileA ReadFile IsBadReadPtr CreateEventA GetModuleFileNameA SetFilePointer GetCurrentProcess GetWindowsDirectoryA GetVolumeInformationA GetFileAttributesExA GetFullPathNameA FindFirstFileExA FindNextFileA IsWow64Process GetModuleFileNameW FreeLibrary SetEnvironmentVariableW FlushInstructionCache FlushFileBuffers WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetLocaleInfoW IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA QueryPerformanceCounter GetCommandLineW GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetConsoleMode GetConsoleCP GetStartupInfoA GetFileType SetHandleCount GetTimeZoneInformation IsValidCodePage GetOEMCP GetCurrentThreadId TlsFree TlsSetValue TlsAlloc TlsGetValue GetStdHandle HeapCreate VirtualFree GetCPInfo LCMapStringW LCMapStringA RtlUnwind GetStartupInfoW IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess CreateThread ResumeThread ExitThread GetSystemInfo VirtualAlloc GetThreadLocale GetLocaleInfoA GetACP HeapSize HeapDestroy GetVersionExA RaiseException WideCharToMultiByte lstrlenW ExitProcess lstrcmpA LoadLibraryA GetProcAddress MultiByteToWideChar Sleep WaitForMultipleObjects DeleteCriticalSection InitializeCriticalSection GlobalFree InterlockedExchange GlobalUnlock LeaveCriticalSection GlobalLock GlobalAlloc EnterCriticalSection LockResource LoadResource SizeofResource FindResourceA lstrcpyA lstrlenA GetModuleHandleA

user32

UnregisterClassA LoadCursorA GetWindowLongA GetWindowRect SetCursor SetFocus MessageBoxW SetWindowLongA GetSystemMetrics GetCursorPos GetParent MapWindowPoints GetDesktopWindow SendMessageA SetWindowPos ReleaseCapture SetForegroundWindow PostMessageA BeginPaint GetMessageA TranslateMessage DrawIcon DispatchMessageA LoadIconA CreateDialogIndirectParamA SetTimer EndPaint KillTimer DestroyWindow EndDialog PtInRect LoadStringA GetDC FillRect GetClientRect ReleaseDC SetClassLongA wsprintfA EnableWindow GetActiveWindow UpdateWindow CallWindowProcA AdjustWindowRectEx CreateWindowExA RegisterClassExA DefWindowProcA ShowWindow TranslateAcceleratorA DrawFocusRect DrawTextA SetCapture GetWindowTextA DrawEdge OffsetRect InvalidateRect LoadImageA GetClassNameA ScreenToClient PostQuitMessage GetWindowTextLengthA SetWindowTextA TrackMouseEvent SetActiveWindow IsDialogMessageA MessageBoxA

gdi32

GetDIBColorTable SetDIBColorTable StretchBlt CreateFontIndirectA DeleteObject CreateDIBSection CreateSolidBrush SelectObject MoveToEx CreatePen CreateCompatibleBitmap BitBlt CreateCompatibleDC TextOutA DeleteDC SetTextColor GetStockObject SetBkMode GetTextExtentPointA LineTo GetObjectA

advapi32

RegQueryValueExA RegDeleteValueA RegCreateKeyExA RegCloseKey RegSetValueExA

shell32

SHGetFolderPathA

ole32

CoInitializeEx CoUninitialize CoCreateInstance CoSetProxyBlanket CreateStreamOnHGlobal

oleaut32

GetErrorInfo SafeArrayDestroy SafeArrayGetElement SafeArrayPutElement SafeArrayGetLBound SafeArrayGetUBound VariantChangeType VariantClear VariantInit SystemTimeToVariantTime VariantTimeToSystemTime SysStringLen SysFreeString SysAllocString SafeArrayCreateVector SafeArrayAccessData SafeArrayUnaccessData SysAllocStringLen

gdiplus

GdipAlloc GdipFree GdiplusShutdown GdiplusStartup GdipCreateBitmapFromScan0 GdipDisposeImage GdipGetImagePalette GdipDeleteGraphics GdipGetImagePaletteSize GdipGetImageGraphicsContext GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipCloneImage GdipBitmapUnlockBits GdipBitmapLockBits GdipDrawImageI GdipCreateBitmapFromStream

msimg32

TransparentBlt AlphaBlend

iphlpapi

GetAdaptersInfo

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-28_84127120c0ba9ecf8ef910874c89eb10_elex_stop

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

gdiplus

msimg32

iphlpapi

version

generic