2026-07-08_093fbe3ff66a4534adf7ed47e05ad410_elex_mafia

General

Target
2026-07-08_093fbe3ff66a4534adf7ed47e05ad410_elex_mafia
Size 524KB
Sample260708-zws2ysas21
SHA256 1fe23483b3d15362ac3bc4f77509368f2ed9459f6a63f22cae7f21d0b6a25249
MD5 093fbe3ff66a4534adf7ed47e05ad410
SHA1 9fda9d8349352502f5d2e77efd2ff5d39480f0fa
SHA512 deaee6b02e7da06f71f61aa3722739ae4732c4db697d788ebcd69886d53a820dfba6f7083e299f8aba2d78feea76a42c295a08f99e6540047937bc11082b9068
SSDEEP 12288:TRyZzqyL66TPub9mR1XQe7WEBzjrvMrNZ:TRyQylTPub9ne7WEkN
TLSH
T13AB4F116B584C432E58206324B66EB52997A7D75AB27A4CB3B84363D2FF03D0E7B4347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_093fbe3ff66a4534adf7ed47e05ad410_elex_mafia

File Explorer

2026-07-08_093fbe3ff66a4534adf7ed47e05ad410_elex_mafia

.exe 524KB

2026-07-08_093fbe3ff66a4534adf7ed47e05ad410_elex_mafia

IMPHASH 6dca3e9fb3928bbdb54dbce669943ec8
SHA256 1fe23483b3d15362ac3bc4f77509368f2ed9459f6a63f22cae7f21d0b6a25249
MD5 093fbe3ff66a4534adf7ed47e05ad410
SHA1 9fda9d8349352502f5d2e77efd2ff5d39480f0fa
SHA512 deaee6b02e7da06f71f61aa3722739ae4732c4db697d788ebcd69886d53a820dfba6f7083e299f8aba2d78feea76a42c295a08f99e6540047937bc11082b9068
SSDEEP 12288:TRyZzqyL66TPub9mR1XQe7WEBzjrvMrNZ:TRyQylTPub9ne7WEkN
TLSH
T13AB4F116B584C432E58206324B66EB52997A7D75AB27A4CB3B84363D2FF03D0E7B4347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetComputerNameW GetLocalTime SystemTimeToFileTime FileTimeToSystemTime SizeofResource LockResource LoadResource FindResourceW FindResourceExW MultiByteToWideChar GetProcAddress LoadLibraryW GetCurrentProcess LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetLastError CloseHandle WideCharToMultiByte MoveFileW DeleteFileW CreateDirectoryW SetFileAttributesW GetTempPathW GetTempFileNameW MoveFileExW lstrlenW CreateFileW GetFileSize ReadFile WriteFile Sleep GetComputerNameA GetModuleFileNameW CreateProcessW GetSystemTime FileTimeToLocalFileTime RaiseException InitializeCriticalSectionAndSpinCount HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap LocalAlloc SetEndOfFile SetStdHandle WriteConsoleW FreeLibrary LoadLibraryA InterlockedIncrement InterlockedDecrement InterlockedExchange EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW GetCurrentThreadId RtlUnwind LCMapStringW GetCPInfo SetUnhandledExceptionFilter ExitProcess GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetConsoleCP GetConsoleMode GetACP GetOEMCP IsValidCodePage SetFilePointer FlushFileBuffers GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW

ole32

CoCreateInstance CoInitialize

shlwapi

PathIsRootW PathFileExistsW PathAppendW PathAddExtensionW PathRemoveExtensionW

Name

.text

Size

136KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

283KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_093fbe3ff66a4534adf7ed47e05ad410_elex_mafia

kernel32

ole32

shlwapi

generic