General
- Target 2026-07-12_e11712e0274ccd1acd03176dbce29493_elex_stop
- Size 727KB
- Sample260712-j48vdagv4t
- SHA256 abb31d086678d19e7d7d40746e10ca1204ca5bd43cc8508d052f0b53ce218fe3
- MD5 e11712e0274ccd1acd03176dbce29493
- SHA1 fb705176bf0ee02bf47b906a55fc0c2c8f65c292
- SHA512 501074472324059b15e7b7acd7dec7d7896c8ba1fe812038378f7ebea635d4fccd1e774f6be52890a7db084b3b48218a9630485bb330ef8c854d3490d2584459
- SSDEEP 6144:hpqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNRcAYnC3:hpqiC/2OGAtkCP4cejGSOpRa3CnIiX
- TLSH T16DF48E0273D680F1D85238711567E26A9B797D154726CE9BEBE03E339D311B0AF2A372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-12_e11712e0274ccd1acd03176dbce29493_elex_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_e11712e0274ccd1acd03176dbce29493_elex_stop.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_e11712e0274ccd1acd03176dbce29493_elex_stop
- Size 727KB
- SHA256 abb31d086678d19e7d7d40746e10ca1204ca5bd43cc8508d052f0b53ce218fe3
- MD5 e11712e0274ccd1acd03176dbce29493
- SHA1 fb705176bf0ee02bf47b906a55fc0c2c8f65c292
- SHA512 501074472324059b15e7b7acd7dec7d7896c8ba1fe812038378f7ebea635d4fccd1e774f6be52890a7db084b3b48218a9630485bb330ef8c854d3490d2584459
- SSDEEP 6144:hpqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNRcAYnC3:hpqiC/2OGAtkCP4cejGSOpRa3CnIiX
- TLSH T16DF48E0273D680F1D85238711567E26A9B797D154726CE9BEBE03E339D311B0AF2A372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies WinLogon for persistence
Executes dropped EXE
Adds Run key to start application
AutoIT Executable
AutoIT scripts compiled to PE executables.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1