2026-07-31_6fde18976f95b70d12f2485665eff688_elex_mafia

General

Target
2026-07-31_6fde18976f95b70d12f2485665eff688_elex_mafia
Size 446KB
Sample260731-wj2lsaed37
SHA256 e6be382a836dc1159a0dc3cb4a6b24e87912a7e7ae5d7261842316e45e127072
MD5 6fde18976f95b70d12f2485665eff688
SHA1 097873a1b8c37e70a3279a1b9133a9f0f443669c
SHA512 88ae1a073e22ee9a4987656cb67968b6f3d2e5769af1c8adabc8578d15abb58102eebf0cb24aa5cdddf5bc46b390c2af84508a47a5a96835537eef49f59f533c
SSDEEP 12288:9rkqMqqRre2fmhhl0TbpmzMZP4PBfhdEjlsW:SqMDe2KhlEvPwW5s
TLSH
T19FA4D0243585C03AE19715348B2ADB57593A3D714B77A8C73BD42BAE2EB06C2E778307
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-31_6fde18976f95b70d12f2485665eff688_elex_mafia

File Explorer

2026-07-31_6fde18976f95b70d12f2485665eff688_elex_mafia

.exe 446KB

2026-07-31_6fde18976f95b70d12f2485665eff688_elex_mafia

IMPHASH c715c44b4f28a9a614dced575531fbb3
SHA256 e6be382a836dc1159a0dc3cb4a6b24e87912a7e7ae5d7261842316e45e127072
MD5 6fde18976f95b70d12f2485665eff688
SHA1 097873a1b8c37e70a3279a1b9133a9f0f443669c
SHA512 88ae1a073e22ee9a4987656cb67968b6f3d2e5769af1c8adabc8578d15abb58102eebf0cb24aa5cdddf5bc46b390c2af84508a47a5a96835537eef49f59f533c
SSDEEP 12288:9rkqMqqRre2fmhhl0TbpmzMZP4PBfhdEjlsW:SqMDe2KhlEvPwW5s
TLSH
T19FA4D0243585C03AE19715348B2ADB57593A3D714B77A8C73BD42BAE2EB06C2E778307
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

70934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetComputerNameW GetLocalTime SystemTimeToFileTime FileTimeToSystemTime SizeofResource LockResource LoadResource FindResourceW FindResourceExW MultiByteToWideChar GetProcAddress LoadLibraryW GetCurrentProcess LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetLastError CloseHandle WideCharToMultiByte MoveFileW DeleteFileW CreateDirectoryW SetFileAttributesW GetTempPathW GetTempFileNameW MoveFileExW lstrlenW CreateFileW GetFileSize ReadFile WriteFile GetComputerNameA GetModuleFileNameW CreateProcessW Sleep GetSystemTime FileTimeToLocalFileTime RaiseException InitializeCriticalSectionAndSpinCount HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap LocalAlloc SetEndOfFile SetStdHandle WriteConsoleW FreeLibrary LoadLibraryA InterlockedIncrement InterlockedDecrement InterlockedExchange EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW GetCurrentThreadId RtlUnwind LCMapStringW GetCPInfo SetUnhandledExceptionFilter ExitProcess GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetConsoleCP GetConsoleMode GetACP GetOEMCP IsValidCodePage SetFilePointer FlushFileBuffers GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW

ole32

CoCreateInstance CoInitialize

shlwapi

PathIsRootW PathFileExistsW PathAppendW PathAddExtensionW PathRemoveExtensionW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-31_6fde18976f95b70d12f2485665eff688_elex_mafia

kernel32

ole32

shlwapi

generic