2026-08-03_fb054aaa1d80cbb34cdbbc6b19afa9b2_elex_maze

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_fb054aaa1d80cbb34cdbbc6b19afa9b2_elex_maze
Size 96KB
Sample260803-g4ev7azelh
SHA256 6aba527356ce2dd51bbc4b0c2f4c76fecf423a86dc1b94bc83043047a1bf97ee
MD5 fb054aaa1d80cbb34cdbbc6b19afa9b2
SHA1 142e16e73ad8097c595c27ab18d772cdd0e3f865
SHA512 2830bd831f16f52e13262ea3da41648b8208b8f772b4159894c6ed755758b6014f5d816d8486b09b857f42fde12e77839d6fc22bf2d325c4a9320c3682907444
SSDEEP 1536:e9eN7yiXJedE05pGPhWDnekAtn/DeRFjMT9dx1qj5RPH+1/6JrJF1eeLuB5oGqZ:e9eNGuCbcPhWa3s5RPH+h6J3fO5oZ
TLSH
T191A36C26FAC05052F8818072B2F94B729736E535172549E3F7D82F6A0F754F2A27938E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_fb054aaa1d80cbb34cdbbc6b19afa9b2_elex_maze

File Explorer

2026-08-03_fb054aaa1d80cbb34cdbbc6b19afa9b2_elex_maze

.exe 96KB

2026-08-03_fb054aaa1d80cbb34cdbbc6b19afa9b2_elex_maze

IMPHASH c24ac3c901fa456d7ca0f81f34632971
SHA256 6aba527356ce2dd51bbc4b0c2f4c76fecf423a86dc1b94bc83043047a1bf97ee
MD5 fb054aaa1d80cbb34cdbbc6b19afa9b2
SHA1 142e16e73ad8097c595c27ab18d772cdd0e3f865
SHA512 2830bd831f16f52e13262ea3da41648b8208b8f772b4159894c6ed755758b6014f5d816d8486b09b857f42fde12e77839d6fc22bf2d325c4a9320c3682907444
SSDEEP 1536:e9eN7yiXJedE05pGPhWDnekAtn/DeRFjMT9dx1qj5RPH+1/6JrJF1eeLuB5oGqZ:e9eNGuCbcPhWa3s5RPH+h6J3fO5oZ
TLSH
T191A36C26FAC05052F8818072B2F94B729736E535172549E3F7D82F6A0F754F2A27938E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

56854

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\pginstaller.auto\postgres.windows\Release\pgbench\pgbench.pdb

libintl-8

libintl_gettext

libpq

ord31 ord33 ord45 ord48 ord95 ord155 ord4 ord28 ord26 ord25 ord24 ord111 ord102 ord23 ord118 ord21 ord140 ord16 ord15 ord156 ord14

ws2_32

select __WSAFDIsSet

kernel32

GetCurrentThreadId EncodePointer IsProcessorFeaturePresent IsDebuggerPresent GetCurrentProcessId SetConsoleMode GetConsoleMode QueryPerformanceFrequency QueryPerformanceCounter CreateTimerQueueTimer CreateTimerQueue CloseHandle WaitForSingleObject GetLastError GetSystemTimeAsFileTime DecodePointer

msvcr120

ferror fread getc _errno exit free malloc realloc memcpy fclose fgets fopen fputc _pclose puts setvbuf atof atoi bsearch getenv strtod strtol memmove strchr clearerr strncmp strtok _getcwd isspace isalnum _beginthreadex _libm_sse2_exp_precise __iob_func _libm_sse2_sin_precise _libm_sse2_sqrt_precise ceil memset fwrite sprintf strrchr _dclass abort strstr isalpha isupper islower toupper tolower fflush _fileno fputs _get_osfhandle _popen system ldexp strcspn _crt_debugger_hook __crtUnhandledException __crtTerminateProcess _except1 _XcptFilter _amsg_exit __getmainargs __set_app_type _exit _cexit _configthreadlocale __setusermatherr _initterm_e _initterm __initenv _fmode _commode ?terminate@@YAXXZ __crtSetUnhandledExceptionFilter _lock _unlock _calloc_crt __dllonexit _onexit _invoke_watson _controlfp_s _except_handler4_common _getpid _libm_sse2_log_precise _strdup strerror isdigit

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_fb054aaa1d80cbb34cdbbc6b19afa9b2_elex_maze

libintl-8

libpq

ws2_32

kernel32

msvcr120

generic