2026-08-02_a3e228ddda0fc0e695bec77e6aad1353_elex_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_a3e228ddda0fc0e695bec77e6aad1353_elex_stop
Size 5.2MB
Sample260802-c989rssfqh
SHA256 f5406426c5d6bcbf400a319f976fbbb906210115326bd01ad0f328357fec90cf
MD5 a3e228ddda0fc0e695bec77e6aad1353
SHA1 2bd494ec3a1b8b0934309876c6053e2abfa5d3a0
SHA512 8fa361223b87d97a05a442424d79b70c676599e83a1616f69f88f66f817d2d8d4334a8b3630adea49a0d2412c35deac29943aa5438c5540befcee834f072e7e4
SSDEEP 98304:QoChlgfBRJ41sVUvAKvpFQ7noU/rA0CDHD67wsDN/78LD7AWIFMLp:QoCLgDV+pFYnoanT8Dw+p
TLSH
T1F846F1437BE700B9CE46E5B51AB71B0BFBB5BA450B1144D3E7D03E86D8227C16A392D2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_a3e228ddda0fc0e695bec77e6aad1353_elex_stop

File Explorer

2026-08-02_a3e228ddda0fc0e695bec77e6aad1353_elex_stop

.exe 5.2MB

2026-08-02_a3e228ddda0fc0e695bec77e6aad1353_elex_stop

IMPHASH d28cc9bb1dcd24d070f7f25c62c38581
SHA256 f5406426c5d6bcbf400a319f976fbbb906210115326bd01ad0f328357fec90cf
MD5 a3e228ddda0fc0e695bec77e6aad1353
SHA1 2bd494ec3a1b8b0934309876c6053e2abfa5d3a0
SHA512 8fa361223b87d97a05a442424d79b70c676599e83a1616f69f88f66f817d2d8d4334a8b3630adea49a0d2412c35deac29943aa5438c5540befcee834f072e7e4
SSDEEP 98304:QoChlgfBRJ41sVUvAKvpFQ7noU/rA0CDHD67wsDN/78LD7AWIFMLp:QoCLgDV+pFYnoanT8Dw+p
TLSH
T1F846F1437BE700B9CE46E5B51AB71B0BFBB5BA450B1144D3E7D03E86D8227C16A392D2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

316648

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW lstrcatW WideCharToMultiByte lstrlenW GetTickCount lstrcmpiA VirtualQuery VirtualProtect IsBadWritePtr GetProcessHeap HeapReAlloc HeapAlloc InterlockedIncrement InterlockedDecrement SetLastError HeapFree FindResourceExA GetUserDefaultUILanguage GetPrivateProfileStringW GetLastError GetEnvironmentVariableA CompareStringW SetEvent GetCurrentProcessId CloseHandle WaitForSingleObject CompareStringA lstrcpyW FindFirstFileW FindClose FormatMessageA WriteFile GetSystemTimeAsFileTime SetFileTime CreateFileA ReadFile IsBadReadPtr CreateEventA GetModuleFileNameA SetFilePointer GetModuleHandleW GetCurrentProcess GetVolumeInformationA GetWindowsDirectoryA FindNextFileA IsWow64Process GetFileAttributesExA GetFullPathNameA GetModuleFileNameW FreeLibrary SetEnvironmentVariableW FlushInstructionCache WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers SetStdHandle GetLocaleInfoW IsValidLocale EnumSystemLocalesA GetUserDefaultLCID QueryPerformanceCounter GetCommandLineW GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetConsoleMode GetConsoleCP GetStartupInfoA GetFileType SetHandleCount GetStringTypeW GetStringTypeA IsValidCodePage GetOEMCP GetTimeZoneInformation GetCurrentThreadId TlsFree TlsSetValue TlsAlloc TlsGetValue GetStdHandle HeapCreate VirtualFree GetCPInfo LCMapStringW LCMapStringA RtlUnwind GetStartupInfoW IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess CreateThread ResumeThread ExitThread GetSystemInfo VirtualAlloc HeapSize HeapDestroy GetThreadLocale GetLocaleInfoA GetACP GetVersionExA RaiseException lstrcmpiW SetEnvironmentVariableA ExitProcess lstrcmpA LoadLibraryA GetProcAddress MultiByteToWideChar DeleteCriticalSection InitializeCriticalSection Sleep WaitForMultipleObjects GlobalFree InterlockedExchange GlobalUnlock LeaveCriticalSection GlobalLock GlobalAlloc EnterCriticalSection LockResource LoadResource SizeofResource FindResourceA lstrcpyA lstrlenA FindFirstFileExA GetModuleHandleA

user32

UnregisterClassA LoadCursorA GetWindowLongA GetWindowRect SetCursor LoadImageA MessageBoxW SetWindowLongA GetSystemMetrics GetCursorPos GetParent MapWindowPoints GetDesktopWindow SendMessageA SetWindowPos ReleaseCapture SetForegroundWindow PostMessageA BeginPaint GetMessageA TranslateMessage DrawIcon DispatchMessageA LoadIconA CreateDialogIndirectParamA SetTimer EndPaint KillTimer DestroyWindow EndDialog PtInRect GetDC FillRect GetClientRect ReleaseDC SetClassLongA wsprintfA SetFocus TranslateAcceleratorA DrawFocusRect DrawTextA SetCapture GetWindowTextA DrawEdge OffsetRect InvalidateRect LoadStringA GetClassNameA ScreenToClient PostQuitMessage GetWindowTextLengthA SetWindowTextA TrackMouseEvent SetActiveWindow IsDialogMessageA EnableWindow GetActiveWindow UpdateWindow AdjustWindowRectEx CallWindowProcA CreateWindowExA RegisterClassExA DefWindowProcA ShowWindow MessageBoxA

gdi32

GetDIBColorTable SetDIBColorTable StretchBlt CreateFontIndirectA DeleteObject CreateDIBSection CreateSolidBrush SelectObject MoveToEx CreatePen CreateCompatibleBitmap BitBlt CreateCompatibleDC TextOutA DeleteDC SetTextColor GetStockObject SetBkMode GetTextExtentPointA LineTo GetObjectA

advapi32

RegSetValueExA RegDeleteValueA RegCreateKeyExA RegCloseKey RegQueryValueExA

shell32

SHGetFolderPathA

ole32

CoInitializeEx CoUninitialize CoSetProxyBlanket CoCreateInstance CreateStreamOnHGlobal

oleaut32

GetErrorInfo SafeArrayDestroy SafeArrayGetElement SafeArrayPutElement SafeArrayGetLBound SafeArrayGetUBound SysAllocStringLen VariantChangeType VariantClear VariantTimeToSystemTime SystemTimeToVariantTime SysStringLen SysFreeString SafeArrayUnaccessData SysAllocString SafeArrayCreateVector SafeArrayAccessData VariantInit

gdiplus

GdipAlloc GdipFree GdiplusShutdown GdiplusStartup GdipCreateBitmapFromScan0 GdipDisposeImage GdipGetImagePalette GdipDeleteGraphics GdipGetImagePaletteSize GdipGetImageGraphicsContext GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipCloneImage GdipBitmapUnlockBits GdipBitmapLockBits GdipDrawImageI GdipCreateBitmapFromStream

msimg32

AlphaBlend TransparentBlt

iphlpapi

GetAdaptersInfo

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_a3e228ddda0fc0e695bec77e6aad1353_elex_stop

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

gdiplus

msimg32

iphlpapi

version

generic