General

  • Target
    2026-07-30_a0c0f05724ddc47c403ddd684f900e45_elex_stop
  • Size 1.2MB
  • Sample260730-ndq9vswejh
  • SHA256 8637292359e60d621d132efa9648866888510c77fadddf2b3ba8f4c5cb7f6171
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-30_a0c0f05724ddc47c403ddd684f900e45_elex_stop
    • Size 1.2MB
    • SHA256 8637292359e60d621d132efa9648866888510c77fadddf2b3ba8f4c5cb7f6171
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies WinLogon for persistence

    • Disables RegEdit via registry modification

    • Disables Task Manager via registry modification

    • Executes dropped EXE

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks