2026-07-22_bd5180ee2d7c1291f8401fcaeed29862_elex_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-22_bd5180ee2d7c1291f8401fcaeed29862_elex_stop
Size 1.6MB
Sample260722-vnc9bazarg
SHA256 ddee3cf2f4512134396a4de63ac0e5241e59c9729ef5e603b965149636998323
MD5 bd5180ee2d7c1291f8401fcaeed29862
SHA1 2e75c167206594dae8dcb4f47e734bd187892a78
SHA512 ef7132ae2ea822b68fde5d1e2a6db7a2bca0548e479f6b70579d92dce9fe55239581c4571795fdc1f4db2a3433acc8243426ea3b75bcff93195abfc45f22d6fe
SSDEEP 24576:5UHCfW1q/pS5PkWjN/fD9A99JLlxZLcvDaktGy2CcYaqOCDUd:5oTt5PkWjN/fDejJXdcvDXtd2CcPCDU
TLSH
T190758E427E8A8262D9AD05F9A43F5598426B7E416E58E0E3F27C73C25DB0783D13738B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-22_bd5180ee2d7c1291f8401fcaeed29862_elex_stop

File Explorer

2026-07-22_bd5180ee2d7c1291f8401fcaeed29862_elex_stop

.exe 1.6MB

2026-07-22_bd5180ee2d7c1291f8401fcaeed29862_elex_stop

IMPHASH bf40f0eeafafac3065dde9dc2b0e392d
SHA256 ddee3cf2f4512134396a4de63ac0e5241e59c9729ef5e603b965149636998323
MD5 bd5180ee2d7c1291f8401fcaeed29862
SHA1 2e75c167206594dae8dcb4f47e734bd187892a78
SHA512 ef7132ae2ea822b68fde5d1e2a6db7a2bca0548e479f6b70579d92dce9fe55239581c4571795fdc1f4db2a3433acc8243426ea3b75bcff93195abfc45f22d6fe
SSDEEP 24576:5UHCfW1q/pS5PkWjN/fD9A99JLlxZLcvDaktGy2CcYaqOCDUd:5oTt5PkWjN/fDejJXdcvDXtd2CcPCDU
TLSH
T190758E427E8A8262D9AD05F9A43F5598426B7E416E58E0E3F27C73C25DB0783D13738B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

267236

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\qb\workspace\ubit\gfx\Special\Installers\IntelCombinedInstaller\15.28\installer\ASE_Installers\IIF2\Installer\HDMI\Release\setup.pdb

kernel32

FreeLibrary GetFileAttributesW GetSystemDirectoryW CreateFileW GetFileSize ReadFile MultiByteToWideChar GetFileTime FileTimeToSystemTime SystemTimeToTzSpecificLocalTime LoadLibraryW GetPrivateProfileStringW CreateMutexW CreateThread GetLocalTime GetCommandLineW GetTickCount SetFilePointer WriteFile EnumResourceLanguagesW GetUserDefaultLangID GetUserDefaultUILanguage GetVersion ConvertDefaultLocale GetLocaleInfoW GetCurrentProcess GetSystemInfo GetSystemWow64DirectoryW OpenProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW TerminateProcess GetExitCodeProcess GetVersionExW CreateEventW SetEvent GlobalAlloc GlobalLock GetProcAddress GlobalFree ExitProcess GetTempPathW IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA FlushFileBuffers LoadLibraryA GetOEMCP GetACP HeapSize WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetStartupInfoA SetHandleCount GetCurrentThreadId GetFileType GetModuleFileNameA GetStdHandle LoadLibraryExW RemoveDirectoryW SetErrorMode MoveFileW Sleep CompareFileTime CopyFileW GetTempFileNameW GlobalUnlock SetFileAttributesW MoveFileExW DeleteFileW GetEnvironmentVariableW GetCurrentDirectoryW VerifyVersionInfoW VerSetConditionMask GetWindowsDirectoryW WaitForSingleObject CreateProcessW FindNextFileW FindClose FindFirstFileW SetLastError LocalFree GetModuleFileNameW WideCharToMultiByte TlsGetValue CloseHandle GetLastError CreateFileA SizeofResource LockResource LoadResource FindResourceW HeapCreate HeapDestroy HeapReAlloc VirtualAlloc VirtualFree GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetCPInfo RtlUnwind RaiseException GetStartupInfoW GetProcessHeap GetVersionExA GetModuleHandleW TlsFree TlsSetValue TlsAlloc SetFileAttributesA SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime SetEndOfFile GetModuleHandleA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetConsoleMode GetConsoleCP HeapFree HeapAlloc LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection InterlockedDecrement InterlockedIncrement InterlockedExchange InterlockedCompareExchange LocalAlloc

user32

GetDC SendMessageW ShowWindow EndDialog wsprintfW DialogBoxIndirectParamW SetWindowPos GetClientRect MonitorFromWindow GetMonitorInfoW OffsetRect GetWindowLongW AdjustWindowRect GetWindowRect SetWindowTextW DrawTextW MessageBoxIndirectW LoadIconW LoadImageW SetRectEmpty PostMessageW EnableWindow ReleaseDC MessageBoxW SetFocus SendMessageTimeoutW ExitWindowsEx EnumWindows GetWindowThreadProcessId GetWindowModuleFileNameW LoadStringW KillTimer SendDlgItemMessageW SetTimer SetDlgItemTextW DialogBoxParamW GetDlgItem

gdi32

SetBkMode SetTextColor DeleteDC GetTextExtentPoint32W SelectObject CreateCompatibleDC DeleteObject CreateFontW GetStockObject

advapi32

OpenSCManagerW RegQueryValueExW RegCloseKey GetNamedSecurityInfoW SetNamedSecurityInfoW RegCreateKeyExW RegSetValueExW RegEnumValueW IsTextUnicode AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken ChangeServiceConfigW ChangeServiceConfig2W CreateServiceW OpenServiceW QueryServiceStatus DeleteService ControlService QueryServiceConfigW StartServiceW CloseServiceHandle RegEnumKeyExW RegDeleteValueW RegQueryInfoKeyW RegDeleteKeyW RegOpenKeyExW

shell32

CommandLineToArgvW SHGetFolderPathW SHCreateDirectoryExW SHCreateDirectoryExA

ole32

CoInitialize CLSIDFromString PropVariantClear CoCreateInstance CoInitializeEx CoUninitialize

oleaut32

SysAllocString SysFreeString VariantClear

cabinet

ord22 ord23 ord20 ord21

setupapi

SetupDiCallClassInstaller SetupDiGetDeviceInstallParamsW SetupDiSetClassInstallParamsW SetupDiGetDeviceRegistryPropertyW SetupOpenInfFileW SetupCloseInfFile SetupFindFirstLineW SetupGetLineTextW SetupGetStringFieldW SetupFindNextLine SetupDiGetINFClassW SetupDiGetClassDevsW SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList

shlwapi

PathAppendA PathFindFileNameW PathFileExistsW SHDeleteKeyW PathStripPathW PathCombineW PathFindExtensionW PathIsSystemFolderW PathRenameExtensionW ord176 PathMatchSpecA PathStripToRootW PathAppendW PathRemoveFileSpecW PathFindFileNameA PathAddBackslashA PathIsDirectoryW PathRemoveFileSpecA SHStrDupW PathAddBackslashW PathRemoveBackslashW PathIsRootW

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

psapi

GetModuleFileNameExW EnumProcessModules

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-22_bd5180ee2d7c1291f8401fcaeed29862_elex_stop

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

cabinet

setupapi

shlwapi

version

psapi

generic