2026-07-23_d9e25cd5a90234491f565ab53102a96a_elex_mafia

General

Target
2026-07-23_d9e25cd5a90234491f565ab53102a96a_elex_mafia
Size 520KB
Sample260723-lrtk2avfka
SHA256 670544e731ba57c5c7dfa21a97e1243a9961a4e0878e23a97dc0c2e330f74b40
MD5 d9e25cd5a90234491f565ab53102a96a
SHA1 b6135184862f76a4f4ae8ae9c5e5ce1b8e3e86ac
SHA512 f51fc12d8fd4f6acbd91a1267abc0465810198af76225b937e8f2cb6c2829d66d5adba387e99367ec6795a76213873efa9d6629bb4c6b922208d18d028e9a9a1
SSDEEP 12288:gj8fuxR21t5i8fAj/9zehzKHSOTIE2Xs+QP2NZ:gj8fuK1GYAr8h2HSON2XL02N
TLSH
T19AB4F1127888C032E4E215314BA2DBA61BBA7C75972695CB3BC0367D7EB52D1E738317
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_d9e25cd5a90234491f565ab53102a96a_elex_mafia

File Explorer

2026-07-23_d9e25cd5a90234491f565ab53102a96a_elex_mafia

.exe 520KB

2026-07-23_d9e25cd5a90234491f565ab53102a96a_elex_mafia

IMPHASH 6dca3e9fb3928bbdb54dbce669943ec8
SHA256 670544e731ba57c5c7dfa21a97e1243a9961a4e0878e23a97dc0c2e330f74b40
MD5 d9e25cd5a90234491f565ab53102a96a
SHA1 b6135184862f76a4f4ae8ae9c5e5ce1b8e3e86ac
SHA512 f51fc12d8fd4f6acbd91a1267abc0465810198af76225b937e8f2cb6c2829d66d5adba387e99367ec6795a76213873efa9d6629bb4c6b922208d18d028e9a9a1
SSDEEP 12288:gj8fuxR21t5i8fAj/9zehzKHSOTIE2Xs+QP2NZ:gj8fuK1GYAr8h2HSON2XL02N
TLSH
T19AB4F1127888C032E4E215314BA2DBA61BBA7C75972695CB3BC0367D7EB52D1E738317
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetComputerNameW GetLocalTime SystemTimeToFileTime FileTimeToSystemTime SizeofResource LockResource LoadResource FindResourceW FindResourceExW MultiByteToWideChar GetProcAddress LoadLibraryW GetCurrentProcess LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetLastError CloseHandle WideCharToMultiByte MoveFileW DeleteFileW CreateDirectoryW SetFileAttributesW GetTempPathW GetTempFileNameW MoveFileExW lstrlenW CreateFileW GetFileSize ReadFile WriteFile Sleep GetComputerNameA GetModuleFileNameW CreateProcessW GetSystemTime FileTimeToLocalFileTime RaiseException InitializeCriticalSectionAndSpinCount HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap LocalAlloc SetEndOfFile SetStdHandle WriteConsoleW FreeLibrary LoadLibraryA InterlockedIncrement InterlockedDecrement InterlockedExchange EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW GetCurrentThreadId RtlUnwind LCMapStringW GetCPInfo SetUnhandledExceptionFilter ExitProcess GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetConsoleCP GetConsoleMode GetACP GetOEMCP IsValidCodePage SetFilePointer FlushFileBuffers GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW

ole32

CoCreateInstance CoInitialize

shlwapi

PathIsRootW PathFileExistsW PathAppendW PathAddExtensionW PathRemoveExtensionW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_d9e25cd5a90234491f565ab53102a96a_elex_mafia

kernel32

ole32

shlwapi

generic