2026-07-08_d2d6b92f3c1c8764fdfa977027964747_elex_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-08_d2d6b92f3c1c8764fdfa977027964747_elex_stop
Size 426KB
Sample260708-ervprsbs8q
SHA256 a35c9c51b2f275436eb2616a1ba06bc7843fcda68743ad12a887ada1a7d44faf
MD5 d2d6b92f3c1c8764fdfa977027964747
SHA1 86b0a5d85dacdd7566338cfeb70df05924df556a
SHA512 819af186885660c10587d3c04afb79c221d003615ebc5c4cf9b1625acc0783274930c56df78c1d27b14e500156182cfebe6898aac0a8886808ba9537ca95e524
SSDEEP 6144:3usN7GYoEFl9nb/5YPfUzLxelq5qsE6YpscWB9ABTjmzyW:esFToEfRbRYPfUzx5qUW6B9A9C
TLSH
T165948E22B795E476C01302B1AE16CB78A1B5BC72D436055777E85F2DAFB01C29A3AF43
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_d2d6b92f3c1c8764fdfa977027964747_elex_stop

File Explorer

2026-07-08_d2d6b92f3c1c8764fdfa977027964747_elex_stop

.exe 426KB

2026-07-08_d2d6b92f3c1c8764fdfa977027964747_elex_stop

IMPHASH 129b615f7cbfd5b5a1ea54c8d8733092
SHA256 a35c9c51b2f275436eb2616a1ba06bc7843fcda68743ad12a887ada1a7d44faf
MD5 d2d6b92f3c1c8764fdfa977027964747
SHA1 86b0a5d85dacdd7566338cfeb70df05924df556a
SHA512 819af186885660c10587d3c04afb79c221d003615ebc5c4cf9b1625acc0783274930c56df78c1d27b14e500156182cfebe6898aac0a8886808ba9537ca95e524
SSDEEP 6144:3usN7GYoEFl9nb/5YPfUzLxelq5qsE6YpscWB9ABTjmzyW:esFToEfRbRYPfUzx5qUW6B9A9C
TLSH
T165948E22B795E476C01302B1AE16CB78A1B5BC72D436055777E85F2DAFB01C29A3AF43
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

117252

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetProcessShutdownParameters CreateThread ResetEvent ExitProcess EnterCriticalSection TerminateThread LeaveCriticalSection GetCurrentThreadId WaitForMultipleObjects GetStdHandle ReadFile GetFileSize GetCommandLineW CreatePipe SetEvent ExitThread GetModuleHandleW GlobalAlloc GlobalLock GlobalUnlock GlobalFree lstrlenW GetTempPathW LoadLibraryW GetProcAddress GetCurrentProcess GetFullPathNameW GetLongPathNameW GetModuleFileNameW GetFileInformationByHandle CreateToolhelp32Snapshot Process32FirstW OpenProcess Process32NextW ExpandEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetFileAttributesW GetVersion VirtualAlloc HeapCreate CreateEventW HeapAlloc InterlockedCompareExchange InterlockedExchange DeleteCriticalSection MoveFileExW CreateFileA GetProcessHeap SetEndOfFile WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers SetStdHandle GetConsoleMode GetConsoleCP SetFilePointer GetLocaleInfoW InitializeCriticalSectionAndSpinCount GetModuleHandleA GetStringTypeA IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetStartupInfoA GetFileType SetHandleCount IsValidCodePage GetOEMCP GetACP HeapReAlloc VirtualFree InitializeCriticalSection SetUnhandledExceptionFilter SetErrorMode GetTickCount WaitForSingleObject CreateProcessW DeleteFileW SetFileAttributesW LoadLibraryA CopyFileW GetModuleFileNameA HeapSize SetLastError TlsFree TlsSetValue TlsAlloc TlsGetValue LocalFree GetStringTypeW LCMapStringW LCMapStringA GetCPInfo RtlUnwind RaiseException GetStartupInfoW WriteFile Sleep GetSystemInfo GetLastError GetDiskFreeSpaceExW GetDriveTypeW GetLogicalDriveStringsW GlobalMemoryStatusEx GetSystemTimeAsFileTime CloseHandle GetFileTime CreateFileW GetVersionExW GetVolumeInformationW GetVolumePathNameW GetSystemDirectoryW InterlockedDecrement HeapFree IsDebuggerPresent UnhandledExceptionFilter TerminateProcess InterlockedIncrement

user32

SetFocus GetSysColor SendMessageW SetTimer EnableWindow GetForegroundWindow LoadImageW LoadIconW FlashWindow AttachThreadInput SetCursor CharLowerW GetSystemMetrics RedrawWindow MessageBoxW BeginPaint EndPaint DefWindowProcW ShowWindow DestroyWindow PostMessageW KillTimer LoadCursorW SetRect DrawIconEx GetSysColorBrush RegisterClassExW AdjustWindowRectEx CreateWindowExW SetParent GetMessageW IsDialogMessageW TranslateMessage DispatchMessageW SetWindowTextW GetWindowLongW SetWindowPos PostQuitMessage SetWindowLongW

gdi32

GetStockObject GetObjectW SelectObject CreateBitmap CreateCompatibleDC BitBlt SetDIBitsToDevice CreateFontIndirectW

gdiplus

GdiplusShutdown GdiplusStartup GdipGetImageWidth GdipLoadImageFromStream GdipDrawImageRectI GdipFillRectangleI GdipGetImageHeight GdipCreateFromHDC GdipDisposeImage GdipCreateSolidFill GdipDeleteBrush GdipDeleteGraphics

shlwapi

StrCpyW PathCreateFromUrlW AssocQueryStringW

comctl32

InitCommonControlsEx

comdlg32

GetSaveFileNameW

advapi32

RegQueryInfoKeyW RegSetValueExW RegCreateKeyExW RegCloseKey RegQueryValueExW RegOpenKeyExW CryptGenRandom CryptGetHashParam CryptDestroyHash CryptHashData CryptReleaseContext CryptCreateHash CryptAcquireContextW RegEnumKeyExW

shell32

ShellExecuteW ord190 ord680 ord155 SHOpenFolderAndSelectItems SHGetFolderPathW

ole32

OleSetContainedObject OleCreate OleLockRunning CoInitializeEx CoCreateInstance CoUninitialize CoSetProxyBlanket CoTaskMemFree GetHGlobalFromStream CreateStreamOnHGlobal

oleaut32

VariantClear VariantInit SysFreeString SysAllocString

wininet

HttpOpenRequestW HttpSendRequestW InternetQueryOptionW InternetCloseHandle HttpQueryInfoW InternetReadFile InternetConnectW InternetSetOptionW InternetOpenW HttpQueryInfoA

powrprof

CallNtPowerInformation

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

psapi

GetModuleFileNameExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_d2d6b92f3c1c8764fdfa977027964747_elex_stop

kernel32

user32

gdi32

gdiplus

shlwapi

comctl32

comdlg32

advapi32

shell32

ole32

oleaut32

wininet

powrprof

version

psapi

generic