General
- Target 2026-07-27_14477d9e9c0eb9d6e67bc7041f8e6b4f_elex_stop
- Size 1.1MB
- Sample260728-ar78msgp7x
- SHA256 06693a8a89c1baafc553859f6c884a71185c60269d2a9dd947cbe05a50daafca
- MD5 14477d9e9c0eb9d6e67bc7041f8e6b4f
- SHA1 011bb4666c40b11681a8ac53c670c76db184c78e
- SHA512 b8f77d97069d67f6011f42f0625277664fb6df483b3fddb2aab66d28d48bd6b16a326a0b9c2ddee549291118fc536c743b4bff279e45b23617a8b81b87e0d188
- SSDEEP 6144:9pqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnCg:9pqiC/2OGAtkCP4cejGSOpRK3CnIi
- TLSH T1F2358E0273D680F1D85238711567E26A9B797D154726CE9BEBE03E339D311B0AF2A372
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-27_14477d9e9c0eb9d6e67bc7041f8e6b4f_elex_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_14477d9e9c0eb9d6e67bc7041f8e6b4f_elex_stop
- Size 1.1MB
- SHA256 06693a8a89c1baafc553859f6c884a71185c60269d2a9dd947cbe05a50daafca
- MD5 14477d9e9c0eb9d6e67bc7041f8e6b4f
- SHA1 011bb4666c40b11681a8ac53c670c76db184c78e
- SHA512 b8f77d97069d67f6011f42f0625277664fb6df483b3fddb2aab66d28d48bd6b16a326a0b9c2ddee549291118fc536c743b4bff279e45b23617a8b81b87e0d188
- SSDEEP 6144:9pqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnCg:9pqiC/2OGAtkCP4cejGSOpRK3CnIi
- TLSH T1F2358E0273D680F1D85238711567E26A9B797D154726CE9BEBE03E339D311B0AF2A372
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Adds Run key to start application
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1