General
- Target 2026-07-06_951b1e7b1f28508629570bd8a4f3012d_elex_hijackloader_stealc_stop_swisyn_tofsee
- Size 1.0MB
- Sample260707-cmermscy9p
- SHA256 a503fe5db6cedde93d079d0eee0426af59355a9134952ce67d8a939712f07639
- MD5 951b1e7b1f28508629570bd8a4f3012d
- SHA1 351d970cca55cb2a561d326942ac52faf9367a31
- SHA512 5359164e538433f5780f926d3bd0a88e4c91f88a5fc1e6bfefe2fcd3592383d4e98180fe7af803d9403adde14b71a6e79933a626fb3bac5ba6abb899edf2d221
- SSDEEP 24576:cFOaEivtCXWeGKOGQZ1SZKSTFDCl0U2NXoyQCZ:s1tCXWPbGQmZKYglT2Ou
- TLSH T15F35BE092561C07BC9134FF298E4DF676510FE513B63A91FA2912E457A70E826BF323B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_951b1e7b1f28508629570bd8a4f3012d_elex_hijackloader_stealc_stop_swisyn_tofsee.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_951b1e7b1f28508629570bd8a4f3012d_elex_hijackloader_stealc_stop_swisyn_tofsee.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_951b1e7b1f28508629570bd8a4f3012d_elex_hijackloader_stealc_stop_swisyn_tofsee
- Size 1.0MB
- SHA256 a503fe5db6cedde93d079d0eee0426af59355a9134952ce67d8a939712f07639
- MD5 951b1e7b1f28508629570bd8a4f3012d
- SHA1 351d970cca55cb2a561d326942ac52faf9367a31
- SHA512 5359164e538433f5780f926d3bd0a88e4c91f88a5fc1e6bfefe2fcd3592383d4e98180fe7af803d9403adde14b71a6e79933a626fb3bac5ba6abb899edf2d221
- SSDEEP 24576:cFOaEivtCXWeGKOGQZ1SZKSTFDCl0U2NXoyQCZ:s1tCXWPbGQmZKYglT2Ou
- TLSH T15F35BE092561C07BC9134FF298E4DF676510FE513B63A91FA2912E457A70E826BF323B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2