General
- Target 2026-06-28_0cb619474a53b2d0f1769b4622d50076_elex_stealc_stop_swisyn
- Size 405KB
- Sample260629-avarjsav8p
- SHA256 516a497c53b09c0edf5601c671ebdd275322ada449552b5ccf46cc9efa491fe6
- MD5 0cb619474a53b2d0f1769b4622d50076
- SHA1 a5d1298757e88b6dd5b2736797eb0ae1212b2eb3
- SHA512 abd021b8cd7abc716576a27c2ac89be93b48cd91220f6bd4f33e203e9432c0069aaae1afd2ab9748656c9476a01f8a3473ff9f4b98026c189b23743a4fb6122a
- SSDEEP 6144:UsLqdufVUNDaD3EG5fRLCv/LnDNhqVAEQB7:PFUNDaD0T/LnZAVA5x
- TLSH T152948D13BA90C037C52245F5186AD739B6BA6D311FA19EC777902B29AE352C379B430F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_0cb619474a53b2d0f1769b4622d50076_elex_stealc_stop_swisyn.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_0cb619474a53b2d0f1769b4622d50076_elex_stealc_stop_swisyn.exe
Resource
win11ltsc2024-20260618-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_0cb619474a53b2d0f1769b4622d50076_elex_stealc_stop_swisyn
- Size 405KB
- SHA256 516a497c53b09c0edf5601c671ebdd275322ada449552b5ccf46cc9efa491fe6
- MD5 0cb619474a53b2d0f1769b4622d50076
- SHA1 a5d1298757e88b6dd5b2736797eb0ae1212b2eb3
- SHA512 abd021b8cd7abc716576a27c2ac89be93b48cd91220f6bd4f33e203e9432c0069aaae1afd2ab9748656c9476a01f8a3473ff9f4b98026c189b23743a4fb6122a
- SSDEEP 6144:UsLqdufVUNDaD3EG5fRLCv/LnDNhqVAEQB7:PFUNDaD0T/LnZAVA5x
- TLSH T152948D13BA90C037C52245F5186AD739B6BA6D311FA19EC777902B29AE352C379B430F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2