2026-08-02_0212c4cbae3d2d5f80ffe3215a88465c_cloudeye_elex_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_0212c4cbae3d2d5f80ffe3215a88465c_cloudeye_elex_stop
Size 3.1MB
Sample260802-ebj84asxct
SHA256 9d135fac9390276c334c53d84bd9b5efb73f31142b98cd247835607e4ef08dba
MD5 0212c4cbae3d2d5f80ffe3215a88465c
SHA1 a525832905a0406026ed019984c6e2e89e9835e0
SHA512 a1f2229e1bf05a1757cf3146e6b3d03fecb634a39e70504fbf385b0445ed972b5ab7699d0667205982a1bae28fbe357a638c147918cb3d8a201fc6f2af3f4163
SSDEEP 49152:Tj4ljSW9TmKnEO7lUc2+9uFrl3+iXEyVKMio5C0i:TUSWxREuTp4D+Nhek
TLSH
T11AE59D22BAEBEB30F2B71A344439B69609A7BD60D738C99F86C6361C05F17D05CB5712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

installer

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-02_0212c4cbae3d2d5f80ffe3215a88465c_cloudeye_elex_stop

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_2

File Explorer

2026-08-02_0212c4cbae3d2d5f80ffe3215a88465c_cloudeye_elex_stop

.exe 3.1MB

2026-08-02_0212c4cbae3d2d5f80ffe3215a88465c_cloudeye_elex_stop

IMPHASH 1a09860425571c2ec22c50a05bb07878
SHA256 9d135fac9390276c334c53d84bd9b5efb73f31142b98cd247835607e4ef08dba
MD5 0212c4cbae3d2d5f80ffe3215a88465c
SHA1 a525832905a0406026ed019984c6e2e89e9835e0
SHA512 a1f2229e1bf05a1757cf3146e6b3d03fecb634a39e70504fbf385b0445ed972b5ab7699d0667205982a1bae28fbe357a638c147918cb3d8a201fc6f2af3f4163
SSDEEP 49152:Tj4ljSW9TmKnEO7lUc2+9uFrl3+iXEyVKMio5C0i:TUSWxREuTp4D+Nhek
TLSH
T11AE59D22BAEBEB30F2B71A344439B69609A7BD60D738C99F86C6361C05F17D05CB5712
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.
NSIS installer

installer

PE Signature issue

Digest

ca:7f:55:92:4e:0a:4e:1e:b4:1b:0a:70:fc:e3:96:ed:89:5f:57:ce

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=TechPowerUp Ltd,O=TechPowerUp Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Chains

Sep 12, 2013

CN=TechPowerUp Ltd,O=TechPowerUp Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Subject

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Serial Number

04:00:00:00:00:01:20:19:c1:90:66

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 18, 2009 - Jan 28, 2028

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BE

Serial Number

01:00:00:00:00:01:25:b0:b4:cc:01

Issuer

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 21, 2009 - Dec 22, 2020

Subject

CN=TechPowerUp Ltd,O=TechPowerUp Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Serial Number

11:21:8c:d7:b9:26:3b:ad:98:b3:f3:bd:78:af:bd:c7:73:e5

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 10, 2011 - Aug 10, 2014

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:0b:7f:6b:00:00:00:00:00:19

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 23, 2006 - May 23, 2016

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

GPU-Z.pdb

2026-08-02_0212c4cbae3d2d5f80ffe3215a88465c_cloudeye_elex_stop

PE Signature issue

kernel32

wininet

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

ws2_32

setupapi

winmm

version

oleacc

imm32

generic