2026-08-08_db887e184311fa6e148f5106ad421d29_elex_floxif_mafia

General

Target
2026-08-08_db887e184311fa6e148f5106ad421d29_elex_floxif_mafia
Size 716KB
Sample260808-vqcessee77
SHA256 6515dfa2c78c7623ccadd85476866151084999288c244a8c31e1b285766ebec9
MD5 db887e184311fa6e148f5106ad421d29
SHA1 becdaac899b66d6ee0b28e060563dc834f14af59
SHA512 5a80f97725cab69f12b98dee84cf30a75581190c0e9702aad5d6ec175005ed2cdd712c908fe170fc5f3188b79d302637dbd07e64e170643ebc2f57825a38df18
SSDEEP 12288:R+LonB/3aK2+c/oq50Lwabhl5NQiP8HCDJGQqANUCwj0FS64nIiUvpKaL83sd2+g:R+2B/3aEbLqANULj0n45U8p3sd2+WjiI
TLSH
T18EF49D22B782C3BED5B220B05D69979914BBF5740F2619C7E3D40B5E4F289C35E3622B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_db887e184311fa6e148f5106ad421d29_elex_floxif_mafia

File Explorer

2026-08-08_db887e184311fa6e148f5106ad421d29_elex_floxif_mafia

.exe 716KB

2026-08-08_db887e184311fa6e148f5106ad421d29_elex_floxif_mafia

IMPHASH ed42db10b3c1bb69db439b51470b9726
SHA256 6515dfa2c78c7623ccadd85476866151084999288c244a8c31e1b285766ebec9
MD5 db887e184311fa6e148f5106ad421d29
SHA1 becdaac899b66d6ee0b28e060563dc834f14af59
SHA512 5a80f97725cab69f12b98dee84cf30a75581190c0e9702aad5d6ec175005ed2cdd712c908fe170fc5f3188b79d302637dbd07e64e170643ebc2f57825a38df18
SSDEEP 12288:R+LonB/3aK2+c/oq50Lwabhl5NQiP8HCDJGQqANUCwj0FS64nIiUvpKaL83sd2+g:R+2B/3aEbLqANULj0n45U8p3sd2+WjiI
TLSH
T18EF49D22B782C3BED5B220B05D69979914BBF5740F2619C7E3D40B5E4F289C35E3622B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

313607

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Develop\My\ssr2\Release\rxrepl.pdb

kernel32

FindFirstFileW FindNextFileW FindClose WideCharToMultiByte MultiByteToWideChar ReadFile GetLastError WriteFile CreateFileW SetFilePointer GetStdHandle CloseHandle SetLastError FormatMessageW LocalFree GetModuleHandleW InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange GetStringTypeW Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer DeleteFileW DeviceIoControl GetFileAttributesW CreateDirectoryW GetProcAddress GetModuleHandleA AreFileApisANSI FormatMessageA HeapFree MoveFileW GetCommandLineW HeapSetInformation HeapAlloc HeapReAlloc RtlUnwind LCMapStringW GetCPInfo RaiseException ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetModuleFileNameW GetLocaleInfoW HeapSize GetACP GetOEMCP IsValidCodePage FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW WriteConsoleW SetStdHandle GetTimeFormatA GetDateFormatA CompareStringW GetTimeZoneInformation SetEnvironmentVariableA

user32

LoadStringW

Name

.text

Size

486KB

Virtual Size

485KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

90KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

21KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

436B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_db887e184311fa6e148f5106ad421d29_elex_floxif_mafia

kernel32

user32

generic