2026-07-30_fb5f9d85fb9b7fa789893c7d792ec5aa_elex_hawkeye_magniber_maze_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_fb5f9d85fb9b7fa789893c7d792ec5aa_elex_hawkeye_magniber_maze_stop
Size 1011KB
Sample260730-t7kbasdj7y
SHA256 55e296b489aadea3194043961c11429641eb41fbead6e235877e0f06cc401788
MD5 fb5f9d85fb9b7fa789893c7d792ec5aa
SHA1 575e56421b471894ec03cfd09fb34ed4418c828a
SHA512 d1b89d020e491a36fa04248bde7258a4b4441fcf2e127710015254d56d7657bf13e2ee2e870f8a31666a0bb00cc7b6f32eaaf4727b6b2305d8db70c22db396c3
SSDEEP 24576:m7nrRi4i08xPWgXe4i7ojhsP5Lgrk1TWb4AN5:+S0c5e30jaNf1TWbdz
TLSH
T18D25CF106A8F5C3BD893B5394725CF6745FA7D605E2689A3BAE42C197BB4183B2313C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_fb5f9d85fb9b7fa789893c7d792ec5aa_elex_hawkeye_magniber_maze_stop

File Explorer

2026-07-30_fb5f9d85fb9b7fa789893c7d792ec5aa_elex_hawkeye_magniber_maze_stop

.exe 1011KB

2026-07-30_fb5f9d85fb9b7fa789893c7d792ec5aa_elex_hawkeye_magniber_maze_stop

IMPHASH 89b051082e3acff2e961aaae130f1b04
SHA256 55e296b489aadea3194043961c11429641eb41fbead6e235877e0f06cc401788
MD5 fb5f9d85fb9b7fa789893c7d792ec5aa
SHA1 575e56421b471894ec03cfd09fb34ed4418c828a
SHA512 d1b89d020e491a36fa04248bde7258a4b4441fcf2e127710015254d56d7657bf13e2ee2e870f8a31666a0bb00cc7b6f32eaaf4727b6b2305d8db70c22db396c3
SSDEEP 24576:m7nrRi4i08xPWgXe4i7ojhsP5Lgrk1TWb4AN5:+S0c5e30jaNf1TWbdz
TLSH
T18D25CF106A8F5C3BD893B5394725CF6745FA7D605E2689A3BAE42C197BB4183B2313C3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

72273

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dvs\p4\build\sw\gcomp\dev\src\NvContainer\_out\x86\release\container\NvContainer.pdb

shlwapi

PathIsRelativeW

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

psapi

GetProcessMemoryInfo

kernel32

GetCurrentThreadId ProcessIdToSessionId OpenProcess GetSystemTimeAsFileTime GetTickCount64 GetModuleHandleW LocalAlloc LocalFree CreateToolhelp32Snapshot Process32FirstW Process32NextW GetCurrentDirectoryW GetErrorMode SetErrorMode FreeLibrary GetProcAddress LoadLibraryExW SetDllDirectoryW WideCharToMultiByte CreateTimerQueueTimer DeleteTimerQueueTimer CreateThread RtlCaptureStackBackTrace SetUnhandledExceptionFilter AddVectoredExceptionHandler RemoveVectoredExceptionHandler AddVectoredContinueHandler RemoveVectoredContinueHandler VerSetConditionMask ExpandEnvironmentStringsW CreateFileW GetFullPathNameW OutputDebugStringW SetLastError GetCurrentProcessId CreateProcessW GetSystemDirectoryW GetModuleHandleA lstrcmpA lstrcmpW VerifyVersionInfoW DeleteFileW OutputDebugStringA GetSystemTime MoveFileW FindCloseChangeNotification FindFirstChangeNotificationW FindNextChangeNotification FindClose FindFirstFileW FindNextFileW RaiseException SetFilePointerEx HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW GetConsoleMode GetConsoleCP HeapAlloc FlushFileBuffers FreeEnvironmentStringsW WriteFile GetStdHandle GetCurrentProcess GetProcessTimes WaitForMultipleObjects OpenEventW CreateEventW WaitForSingleObject ResetEvent SetEvent GetLastError CloseHandle GetFileAttributesW GetModuleFileNameW GetProcessHeap GetFileType SetStdHandle WriteConsoleW SetEndOfFile ReadFile QueryPerformanceCounter CreateProcessA ReadConsoleW EncodePointer DecodePointer RtlUnwind IsProcessorFeaturePresent ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar GetCommandLineW EnterCriticalSection LeaveCriticalSection IsDebuggerPresent HeapFree HeapSize IsValidCodePage GetACP GetOEMCP GetCPInfo GetStringTypeW GetCurrentThread SetConsoleCtrlHandler DeleteCriticalSection FatalAppExitA UnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetTickCount CreateSemaphoreW GetEnvironmentStringsW

user32

LoadStringW ShutdownBlockReasonCreate SetWindowLongW GetWindowLongW MsgWaitForMultipleObjects DestroyWindow CreateWindowExW UnregisterClassW RegisterClassW DefWindowProcW PostMessageW PeekMessageW DispatchMessageW TranslateMessage ShutdownBlockReasonDestroy

shell32

CommandLineToArgvW

advapi32

SetServiceStatus RegisterServiceCtrlHandlerExW QueryServiceConfigW OpenServiceW OpenSCManagerW CloseServiceHandle ChangeServiceConfigW RegSetValueExW RegDeleteValueW RegCreateKeyExW RegCloseKey RegGetValueW BuildExplicitAccessWithNameW SetSecurityInfo GetSecurityInfo SetEntriesInAclW LookupAccountSidW CreateWellKnownSid OpenProcessToken StartServiceCtrlDispatcherW

Name

.text

Size

231KB

Virtual Size

230KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

465B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

147KB

Virtual Size

146KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

580KB

Virtual Size

584KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_fb5f9d85fb9b7fa789893c7d792ec5aa_elex_hawkeye_magniber_maze_stop

shlwapi

version

psapi

kernel32

user32

shell32

advapi32

generic