00d49ff94a3c83a0fa097e666682bfce7e631c4a8c9d399b8e1aa019724a65e4 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-08-08...ia.exe

windows10-2004-x64

7

2026-08-08...ia.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_07768c1217cbf94e397a143b82e698d7_elex_mafia
Size 872KB
Sample260808-ess8bsbf88
SHA256 00d49ff94a3c83a0fa097e666682bfce7e631c4a8c9d399b8e1aa019724a65e4
MD5 07768c1217cbf94e397a143b82e698d7
SHA1 56c387fd60949a6272ff69e90107287a127c32fe
SHA512 357efdb9aa89cb7d1d211119ff8bb074878a79668d88272235ac277edafcd9f6921b2d0656d3e3df2774fbe7878e75ab5957e4b16531d5f1a91fe7243f0cdc2d
SSDEEP 24576:MdoHbfpw7lKINWE4aH7YBr69CyjQJUrBbbZtB:OoHbyzNzjSr6xbt
TLSH
T19815F16172E09031F1772A309A3A8732497FBC765872C18E63D5395D1E73BC2CA79B26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-08_07768c1217cbf94e397a143b82e698d7_elex_mafia.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

9 signatures

150 seconds

discovery spyware stealer

Behavioral task

behavioral2

Sample

2026-08-08_07768c1217cbf94e397a143b82e698d7_elex_mafia.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

discovery ransomware spyware stealer

Malware Config

Targets

- Target
  2026-08-08_07768c1217cbf94e397a143b82e698d7_elex_mafia
- Size 872KB
- SHA256 00d49ff94a3c83a0fa097e666682bfce7e631c4a8c9d399b8e1aa019724a65e4
- MD5 07768c1217cbf94e397a143b82e698d7
- SHA1 56c387fd60949a6272ff69e90107287a127c32fe
- SHA512 357efdb9aa89cb7d1d211119ff8bb074878a79668d88272235ac277edafcd9f6921b2d0656d3e3df2774fbe7878e75ab5957e4b16531d5f1a91fe7243f0cdc2d
- SSDEEP 24576:MdoHbfpw7lKINWE4aH7YBr69CyjQJUrBbbZtB:OoHbyzNzjSr6xbt
- TLSH
  T19815F16172E09031F1772A309A3A8732497FBC765872C18E63D5395D1E73BC2CA79B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery spyware stealer ransomware
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryransomwarespywarestealer

© 2018-2026

Terms | Privacy