2026-07-23_4320696e7f8587bebd28c9e7a61e1a21_elex_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-23_4320696e7f8587bebd28c9e7a61e1a21_elex_stop
Size 426KB
Sample260723-tbvr6asdkc
SHA256 438cca07613b9422802534717a2b9b6407600e1bf06fd2713774229aeff1e7cc
MD5 4320696e7f8587bebd28c9e7a61e1a21
SHA1 8f67c85e61b17335f1e33e272f5687b13ab143bd
SHA512 9e770cc6a05d19d4e2d81394cb48452fc2cfe4efe27df57d2e92837726a50d042093dac875fcd59992dff2430c2c28ca39f52a23486547aae3eede08433ffa4f
SSDEEP 12288:iezWUa6omSPzCTBpqQ3cgX0oZbTD7z3rT5:iGWULEOEQ3c+0oZbTD7z7N
TLSH
T125948E227785E476C01302B16E16CB78A5B5BCB2E936054777E88F1DEFB05C25A3AB43
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_4320696e7f8587bebd28c9e7a61e1a21_elex_stop

File Explorer

2026-07-23_4320696e7f8587bebd28c9e7a61e1a21_elex_stop

.exe 426KB

2026-07-23_4320696e7f8587bebd28c9e7a61e1a21_elex_stop

IMPHASH 129b615f7cbfd5b5a1ea54c8d8733092
SHA256 438cca07613b9422802534717a2b9b6407600e1bf06fd2713774229aeff1e7cc
MD5 4320696e7f8587bebd28c9e7a61e1a21
SHA1 8f67c85e61b17335f1e33e272f5687b13ab143bd
SHA512 9e770cc6a05d19d4e2d81394cb48452fc2cfe4efe27df57d2e92837726a50d042093dac875fcd59992dff2430c2c28ca39f52a23486547aae3eede08433ffa4f
SSDEEP 12288:iezWUa6omSPzCTBpqQ3cgX0oZbTD7z3rT5:iGWULEOEQ3c+0oZbTD7z7N
TLSH
T125948E227785E476C01302B16E16CB78A5B5BCB2E936054777E88F1DEFB05C25A3AB43
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

117252

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetProcessShutdownParameters CreateThread ResetEvent ExitProcess EnterCriticalSection TerminateThread LeaveCriticalSection GetCurrentThreadId WaitForMultipleObjects GetStdHandle ReadFile GetFileSize GetCommandLineW CreatePipe SetEvent ExitThread GetModuleHandleW GlobalAlloc GlobalLock GlobalUnlock GlobalFree lstrlenW GetTempPathW LoadLibraryW GetProcAddress GetCurrentProcess GetFullPathNameW GetLongPathNameW GetModuleFileNameW GetFileInformationByHandle CreateToolhelp32Snapshot Process32FirstW OpenProcess Process32NextW ExpandEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetFileAttributesW GetVersion VirtualAlloc HeapCreate CreateEventW HeapAlloc InterlockedCompareExchange InterlockedExchange DeleteCriticalSection MoveFileExW CreateFileA GetProcessHeap SetEndOfFile WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers SetStdHandle GetConsoleMode GetConsoleCP SetFilePointer GetLocaleInfoW InitializeCriticalSectionAndSpinCount GetModuleHandleA GetStringTypeA IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetStartupInfoA GetFileType SetHandleCount IsValidCodePage GetOEMCP GetACP HeapReAlloc VirtualFree InitializeCriticalSection SetUnhandledExceptionFilter SetErrorMode GetTickCount WaitForSingleObject CreateProcessW DeleteFileW SetFileAttributesW LoadLibraryA CopyFileW GetModuleFileNameA HeapSize SetLastError TlsFree TlsSetValue TlsAlloc TlsGetValue LocalFree GetStringTypeW LCMapStringW LCMapStringA GetCPInfo RtlUnwind RaiseException GetStartupInfoW WriteFile Sleep GetSystemInfo GetLastError GetDiskFreeSpaceExW GetDriveTypeW GetLogicalDriveStringsW GlobalMemoryStatusEx GetSystemTimeAsFileTime CloseHandle GetFileTime CreateFileW GetVersionExW GetVolumeInformationW GetVolumePathNameW GetSystemDirectoryW InterlockedDecrement HeapFree IsDebuggerPresent UnhandledExceptionFilter TerminateProcess InterlockedIncrement

user32

SetFocus GetSysColor SendMessageW SetTimer EnableWindow GetForegroundWindow LoadImageW LoadIconW FlashWindow AttachThreadInput SetCursor CharLowerW GetSystemMetrics RedrawWindow MessageBoxW BeginPaint EndPaint DefWindowProcW ShowWindow DestroyWindow PostMessageW KillTimer LoadCursorW SetRect DrawIconEx GetSysColorBrush RegisterClassExW AdjustWindowRectEx CreateWindowExW SetParent GetMessageW IsDialogMessageW TranslateMessage DispatchMessageW SetWindowTextW GetWindowLongW SetWindowPos PostQuitMessage SetWindowLongW

gdi32

GetStockObject GetObjectW SelectObject CreateBitmap CreateCompatibleDC BitBlt SetDIBitsToDevice CreateFontIndirectW

gdiplus

GdiplusShutdown GdiplusStartup GdipGetImageWidth GdipLoadImageFromStream GdipDrawImageRectI GdipFillRectangleI GdipGetImageHeight GdipCreateFromHDC GdipDisposeImage GdipCreateSolidFill GdipDeleteBrush GdipDeleteGraphics

shlwapi

StrCpyW PathCreateFromUrlW AssocQueryStringW

comctl32

InitCommonControlsEx

comdlg32

GetSaveFileNameW

advapi32

RegQueryInfoKeyW RegSetValueExW RegCreateKeyExW RegCloseKey RegQueryValueExW RegOpenKeyExW CryptGenRandom CryptGetHashParam CryptDestroyHash CryptHashData CryptReleaseContext CryptCreateHash CryptAcquireContextW RegEnumKeyExW

shell32

ShellExecuteW ord190 ord680 ord155 SHOpenFolderAndSelectItems SHGetFolderPathW

ole32

OleSetContainedObject OleCreate OleLockRunning CoInitializeEx CoCreateInstance CoUninitialize CoSetProxyBlanket CoTaskMemFree GetHGlobalFromStream CreateStreamOnHGlobal

oleaut32

VariantClear VariantInit SysFreeString SysAllocString

wininet

HttpOpenRequestW HttpSendRequestW InternetQueryOptionW InternetCloseHandle HttpQueryInfoW InternetReadFile InternetConnectW InternetSetOptionW InternetOpenW HttpQueryInfoA

powrprof

CallNtPowerInformation

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

psapi

GetModuleFileNameExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_4320696e7f8587bebd28c9e7a61e1a21_elex_stop

kernel32

user32

gdi32

gdiplus

shlwapi

comctl32

comdlg32

advapi32

shell32

ole32

oleaut32

wininet

powrprof

version

psapi

generic