2026-08-06_e9b75262a34b741d1d2ea5c0d3066190_elex_maze

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-06_e9b75262a34b741d1d2ea5c0d3066190_elex_maze
Size 561KB
Sample260807-aefymawzbx
SHA256 728dcd16749b170b765a372ea038ec1b002972061ce4f7ce9815b76555f9e33f
MD5 e9b75262a34b741d1d2ea5c0d3066190
SHA1 32d083c768db96071afe892bd432cd63641ec661
SHA512 0f8c93ac720aebe3464940666ac95ef29947f7801197f8947b07529f3f8e640c2ba9c6dd691b2979af968935d619a73c3c1539fd276b9c3557b2a410a42051e2
SSDEEP 12288:he2bWzVHVBCLQ4k/k4hATL6LMk6GC39n0ryzTHOGn8XuK26:s2bWQQ1hAPg6JN0mzKNuKD
TLSH
T171C46A11B7A6D13AD5B212B15E68AB09447EBD340F3655EBF3C83E1E09309C1AB36673
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-08-06_e9b75262a34b741d1d2ea5c0d3066190_elex_maze

.exe 561KB

2026-08-06_e9b75262a34b741d1d2ea5c0d3066190_elex_maze

IMPHASH 40656f4165c4b452c254569b6c633414
SHA256 728dcd16749b170b765a372ea038ec1b002972061ce4f7ce9815b76555f9e33f
MD5 e9b75262a34b741d1d2ea5c0d3066190
SHA1 32d083c768db96071afe892bd432cd63641ec661
SHA512 0f8c93ac720aebe3464940666ac95ef29947f7801197f8947b07529f3f8e640c2ba9c6dd691b2979af968935d619a73c3c1539fd276b9c3557b2a410a42051e2
SSDEEP 12288:he2bWzVHVBCLQ4k/k4hATL6LMk6GC39n0ryzTHOGn8XuK26:s2bWQQ1hAPg6JN0mzKNuKD
TLSH
T171C46A11B7A6D13AD5B212B15E68AB09447EBD340F3655EBF3C83E1E09309C1AB36673
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

80:67:ee:85:8d:60:ae:8e:1d:2a:45:3f:5a:41:9c:12:d2:1b:ba:34:60:07:64:5a:e1:22:26:d8:30:a2:09:88

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Panda Security S.L.,O=Panda Security S.L.,L=Bilbao,C=ES

Chains

Jul 8, 2026

CN=Panda Security S.L.,O=Panda Security S.L.,L=Bilbao,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Panda Security S.L.,O=Panda Security S.L.,L=Bilbao,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Panda Security S.L.,O=Panda Security S.L.,L=Bilbao,C=ES

Serial Number

01:44:e5:1c:11:d9:c2:9d:6c:f7:65:c5:89:27:19:ad

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 11, 2024 - Nov 14, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

173951

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Builds\100\Aether\AetherAgent-1.25.12\bin\InstallerHelper.pdb

crypt32

CryptImportPublicKeyInfo CryptMsgClose CertCloseStore CertFreeCertificateContext CertFindCertificateInStore CryptMsgGetParam CryptQueryObject CertGetNameStringW

gdi32

SetTextColor CreateSolidBrush GetDeviceCaps CreateFontW SetBkColor

rpcrt4

UuidCreate UuidToStringW RpcStringFreeW

version

VerQueryValueW

wintrust

WinVerifyTrust

kernel32

WaitForSingleObject CopyFileW WriteFile GetTempPathW ReadFile SetLastError GetCurrentProcess GetExitCodeProcess TerminateProcess CreateProcessW GetCurrentProcessId Sleep DuplicateHandle GetPrivateProfileStringW CreateThread SetDllDirectoryW GetCommandLineW OpenEventW SetEvent CreateEventW MulDiv FindResourceExW LoadResource FindResourceW LockResource FreeResource GetStringTypeW GetCurrentThreadId GetFileAttributesExW EncodePointer EnterCriticalSection LeaveCriticalSection HeapFree FindClose IsDebuggerPresent IsProcessorFeaturePresent RtlUnwind GetCPInfo CreateTimerQueue WaitForSingleObjectEx SignalObjectAndWait SwitchToThread SetThreadPriority GetThreadPriority TlsAlloc TlsGetValue TlsSetValue TlsFree GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait SetEnvironmentVariableA UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetTickCount CreateSemaphoreW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap ExitProcess GetModuleHandleExW HeapSize GetCurrentThread IsValidCodePage GetOEMCP GetStdHandle GetFileType QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc OutputDebugStringW GetThreadTimes FreeLibraryAndExitThread GetModuleHandleA GetVersionExW VirtualAlloc VirtualFree VirtualProtect ReleaseSemaphore InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle WriteConsoleW FlushFileBuffers ReadConsoleW FindNextFileW DeleteFileW SetFileAttributesW FindFirstFileW GetModuleHandleW GetModuleFileNameW SystemTimeToFileTime TzSpecificLocalTimeToSystemTime FileTimeToSystemTime GetTimeZoneInformation GetSystemTimeAsFileTime GetLocalTime GetSystemTime LoadLibraryExW FreeLibrary GetProcAddress LoadLibraryW LocalFree LocalAlloc GetACP DecodePointer DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetLastError RaiseException WideCharToMultiByte MultiByteToWideChar CloseHandle GetFileSizeEx CreateFileW MoveFileExW SetEnvironmentVariableW RemoveDirectoryW HeapAlloc

user32

GetDC SendDlgItemMessageW SetDlgItemTextW SetThreadDesktop CloseDesktop CloseWindowStation GetDlgCtrlID DefWindowProcW DialogBoxParamW OpenWindowStationW OpenInputDesktop SetProcessWindowStation GetDlgItem ReleaseDC SetTimer LoadBitmapW PostMessageW

advapi32

CryptGetHashParam RegDeleteValueW CryptHashData CryptSetHashParam CryptCreateHash CryptReleaseContext CryptImportKey CryptAcquireContextW UnregisterTraceGuids RegisterTraceGuidsW GetTraceEnableFlags GetTraceEnableLevel GetTraceLoggerHandle CryptDecrypt CryptGetKeyParam CryptEncrypt RegCloseKey RegQueryValueExW RegOpenKeyExW TraceEvent CryptDestroyHash CryptDestroyKey

shell32

SHGetFolderPathW CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-06_e9b75262a34b741d1d2ea5c0d3066190_elex_maze

crypt32

gdi32

rpcrt4

version

wintrust

kernel32

user32

advapi32

shell32

generic