2026-08-06_db77ac1a5a47e7d41fccb3cbe765c16c_elex_maze_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-06_db77ac1a5a47e7d41fccb3cbe765c16c_elex_maze_stealc
Size 227KB
Sample260806-r8clqstdlb
SHA256 84423656e166baff0bbe71459e439dca03aa6bffdaf0df20a77bf9392fddbd36
MD5 db77ac1a5a47e7d41fccb3cbe765c16c
SHA1 0305334fedd2f8de584b1addb6dbf89e066b47a7
SHA512 11eabcb28cf69e6a3df2006855796806525fe17c414d452d69d7c74eaabd3b045440625064b1f95431f81fe74e09ca6e23d18ca747b1123ca8521ad2d6f2ef11
SSDEEP 3072:5X+hPjB4OJct716dGbih0KLaB3CfGA/jXhTEIT/ifDQkTClXYuxUyLiGE:5XO4OI6dG29zuA/jXFbsXClXYbtGE
TLSH
T1D4348D03FAD58071F973023208B5A629567FBD714E26EA4FA7944F0E5A30682FE35763
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-08-06_db77ac1a5a47e7d41fccb3cbe765c16c_elex_maze_stealc

File Explorer

2026-08-06_db77ac1a5a47e7d41fccb3cbe765c16c_elex_maze_stealc

.exe 227KB

2026-08-06_db77ac1a5a47e7d41fccb3cbe765c16c_elex_maze_stealc

IMPHASH 8477f27173438b1f3c34658f2fd10d51
SHA256 84423656e166baff0bbe71459e439dca03aa6bffdaf0df20a77bf9392fddbd36
MD5 db77ac1a5a47e7d41fccb3cbe765c16c
SHA1 0305334fedd2f8de584b1addb6dbf89e066b47a7
SHA512 11eabcb28cf69e6a3df2006855796806525fe17c414d452d69d7c74eaabd3b045440625064b1f95431f81fe74e09ca6e23d18ca747b1123ca8521ad2d6f2ef11
SSDEEP 3072:5X+hPjB4OJct716dGbih0KLaB3CfGA/jXhTEIT/ifDQkTClXYuxUyLiGE:5XO4OI6dG29zuA/jXFbsXClXYbtGE
TLSH
T1D4348D03FAD58071F973023208B5A629567FBD714E26EA4FA7944F0E5A30682FE35763
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

ca:f5:8c:51:92:11:06:05:62:16:25:d1:8d:5f:99:8f:b8:49:04:38

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=7HS-GO BO2012Launcher

Chains

Aug 4, 2026

CN=7HS-GO BO2012Launcher

Subject

CN=7HS-GO BO2012Launcher

Serial Number

19:0f:68:e5:e2:6d:3f:ac:47:f2:f8:5c:ed:7a:2f:83

Issuer

CN=7HS-GO BO2012Launcher

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 4, 2026 - Aug 4, 2036

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Minor OS version

Major OS version

Entry point

106590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

SHFileOperationW Shell_NotifyIconW ShellExecuteExW

comctl32

InitCommonControlsEx

ws2_32

WSAAddressToStringW gethostname WSAStartup WSACleanup getaddrinfo freeaddrinfo

shlwapi

PathFileExistsW

kernel32

LoadLibraryExW FindClose GetCurrentDirectoryW FindFirstFileW FindNextFileW CopyFileW MultiByteToWideChar WideCharToMultiByte GetLocalTime GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW GetFileAttributesW DeleteFileW HeapReAlloc GetOEMCP GetACP IsValidCodePage FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter WriteFile GetModuleFileNameW GetFileType GetStdHandle GetConsoleCP GetCurrentThreadId IsDebuggerPresent HeapSize GetModuleHandleExW ExitProcess EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW IsProcessorFeaturePresent GetProcAddress GetModuleHandleW GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess Sleep InitializeCriticalSectionAndSpinCount SetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter GetConsoleMode SetFilePointerEx OutputDebugStringW SetStdHandle WriteConsoleW FlushFileBuffers CreateFileW CloseHandle GetProcessHeap GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer RaiseException RtlUnwind GetLastError HeapFree GetCommandLineW GetCPInfo HeapAlloc

user32

GetWindowLongW PtInRect FillRect MapWindowPoints ClientToScreen GetCursorPos SetCursor AdjustWindowRect GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC SetForegroundWindow UpdateWindow SetWindowLongW TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu GetSystemMetrics EnableWindow GetDlgCtrlID ShowWindow DestroyWindow CreateWindowExW RegisterClassExW CallWindowProcW PostQuitMessage DefWindowProcW PostMessageW SendMessageW TrackMouseEvent MessageBoxW DispatchMessageW TranslateMessage GetMessageW LoadCursorW GetClassNameW LoadIconW DestroyIcon DrawTextW

gdi32

SetBkColor SetBkMode SetTextColor GetStockObject SelectObject EnumFontFamiliesExW DeleteObject CreateSolidBrush CreateFontW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-06_db77ac1a5a47e7d41fccb3cbe765c16c_elex_maze_stealc

PE Signature issue

shell32

comctl32

ws2_32

shlwapi

kernel32

user32

gdi32

generic