2026-06-27_ad30f2d40ece9298f39a35fb4cb429a2_elex_mafia_magniber

General

Target
2026-06-27_ad30f2d40ece9298f39a35fb4cb429a2_elex_mafia_magniber
Size 641KB
Sample260629-ejy28ady4r
SHA256 4a06b767aa4dde326cd537e8ee35311858b53195d41b342809211ec71ac39a20
MD5 ad30f2d40ece9298f39a35fb4cb429a2
SHA1 4239e46736fd3e3821ff8bea9c2aad7422dadd87
SHA512 c0285fa328fdf0c7251774ad66bb6a58ac730c07bafd6f638193ee16c8eb0f8fe61c87464ecdce97a8f7d6006413db7bc9f5f4fd3166c4585d84e0414acb3476
SSDEEP 12288:WRvec5T/QTU+R4IfGQCPpTO278fc3Td4zZohAhTIi9gEcaQM9cWR+NDeB6:Wpec5ToTEzQkpTP8U3TKeh4PgmP93R+i
TLSH
T1F6D4E02139C4C075D2672573C87DDBF85AEDBC24AA61655B3BDE3A783F306D1922038A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-27_ad30f2d40ece9298f39a35fb4cb429a2_elex_mafia_magniber

File Explorer

2026-06-27_ad30f2d40ece9298f39a35fb4cb429a2_elex_mafia_magniber

.exe 641KB

2026-06-27_ad30f2d40ece9298f39a35fb4cb429a2_elex_mafia_magniber

IMPHASH 2df79f742f329b4934316cc34263785d
SHA256 4a06b767aa4dde326cd537e8ee35311858b53195d41b342809211ec71ac39a20
MD5 ad30f2d40ece9298f39a35fb4cb429a2
SHA1 4239e46736fd3e3821ff8bea9c2aad7422dadd87
SHA512 c0285fa328fdf0c7251774ad66bb6a58ac730c07bafd6f638193ee16c8eb0f8fe61c87464ecdce97a8f7d6006413db7bc9f5f4fd3166c4585d84e0414acb3476
SSDEEP 12288:WRvec5T/QTU+R4IfGQCPpTO278fc3Td4zZohAhTIi9gEcaQM9cWR+NDeB6:Wpec5ToTEzQkpTP8U3TKeh4PgmP93R+i
TLSH
T1F6D4E02139C4C075D2672573C87DDBF85AEDBC24AA61655B3BDE3A783F306D1922038A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

57016

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameW GetModuleFileNameA GetTickCount SetLastError GetProcAddress LoadLibraryA LockResource LoadResource LoadLibraryW ReadFile GetCommandLineW GetModuleHandleW GetCurrentProcess AddVectoredExceptionHandler EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetStringTypeW MultiByteToWideChar LCMapStringW HeapReAlloc WideCharToMultiByte FindResourceExW WriteFile CloseHandle GetCommandLineA GetLastError RtlUnwind RaiseException ExitProcess DecodePointer EncodePointer HeapSetInformation GetStartupInfoW HeapAlloc HeapFree TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCurrentThread TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection FatalAppExitA EnterCriticalSection SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW GetStdHandle Sleep HeapSize FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate HeapDestroy QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage IsValidLocale

user32

EnumWindows LoadIconA LoadIconW

ole32

CoTaskMemFree StringFromIID CoGetClassObject

advapi32

RegQueryValueW RegSetValueW RegCloseKey RegOpenKeyW

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-27_ad30f2d40ece9298f39a35fb4cb429a2_elex_mafia_magniber

kernel32

user32

ole32

advapi32

generic