2026-07-17_13a5415bbb9c47b5c138dfc854f6ac93_elex_mafia

General

Target
2026-07-17_13a5415bbb9c47b5c138dfc854f6ac93_elex_mafia
Size 446KB
Sample260717-3wbdpadv2v
SHA256 9197879043adaef7860dcb778a9f7c48e09c214007336340b32b7ace1cc97c3e
MD5 13a5415bbb9c47b5c138dfc854f6ac93
SHA1 86c1b9649778f529710d7b6894435d47e15a92f2
SHA512 fff4ea60722409203f57a2436c232b598568f7ab90fa902ca1d2eca579b905c4adad0f9b5d3afd57e31fb2de85200c6c8ff899f3ecc3fb98d4269ef8ecba78e6
SSDEEP 6144:6H4ozQAja2HQT2g9c4MIw0JhZe+HxDu8xuCW5cuMCam7ypFUIz0zgrXhTG5zCQi6:+6PC74MIw0JhZnDVxO5+pFUiB7QKe
TLSH
T139A4DF603684C13AE5E705358A36DB56093E3E659722A8C73BDC2BAE2E713D1D738347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-17_13a5415bbb9c47b5c138dfc854f6ac93_elex_mafia

File Explorer

2026-07-17_13a5415bbb9c47b5c138dfc854f6ac93_elex_mafia

.exe 446KB

2026-07-17_13a5415bbb9c47b5c138dfc854f6ac93_elex_mafia

IMPHASH c715c44b4f28a9a614dced575531fbb3
SHA256 9197879043adaef7860dcb778a9f7c48e09c214007336340b32b7ace1cc97c3e
MD5 13a5415bbb9c47b5c138dfc854f6ac93
SHA1 86c1b9649778f529710d7b6894435d47e15a92f2
SHA512 fff4ea60722409203f57a2436c232b598568f7ab90fa902ca1d2eca579b905c4adad0f9b5d3afd57e31fb2de85200c6c8ff899f3ecc3fb98d4269ef8ecba78e6
SSDEEP 6144:6H4ozQAja2HQT2g9c4MIw0JhZe+HxDu8xuCW5cuMCam7ypFUIz0zgrXhTG5zCQi6:+6PC74MIw0JhZnDVxO5+pFUiB7QKe
TLSH
T139A4DF603684C13AE5E705358A36DB56093E3E659722A8C73BDC2BAE2E713D1D738347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

70934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetComputerNameW GetLocalTime SystemTimeToFileTime FileTimeToSystemTime SizeofResource LockResource LoadResource FindResourceW FindResourceExW MultiByteToWideChar GetProcAddress LoadLibraryW GetCurrentProcess LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetLastError CloseHandle WideCharToMultiByte MoveFileW DeleteFileW CreateDirectoryW SetFileAttributesW GetTempPathW GetTempFileNameW MoveFileExW lstrlenW CreateFileW GetFileSize ReadFile WriteFile GetComputerNameA GetModuleFileNameW CreateProcessW Sleep GetSystemTime FileTimeToLocalFileTime RaiseException InitializeCriticalSectionAndSpinCount HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap LocalAlloc SetEndOfFile SetStdHandle WriteConsoleW FreeLibrary LoadLibraryA InterlockedIncrement InterlockedDecrement InterlockedExchange EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW GetCurrentThreadId RtlUnwind LCMapStringW GetCPInfo SetUnhandledExceptionFilter ExitProcess GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetConsoleCP GetConsoleMode GetACP GetOEMCP IsValidCodePage SetFilePointer FlushFileBuffers GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW

ole32

CoCreateInstance CoInitialize

shlwapi

PathIsRootW PathFileExistsW PathAppendW PathAddExtensionW PathRemoveExtensionW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-17_13a5415bbb9c47b5c138dfc854f6ac93_elex_mafia

kernel32

ole32

shlwapi

generic