General
- Target 2026-08-08_907ae8e562dcc417748d7c3ed95105ec_elex_stop
- Size 2.0MB
- Sample260809-ag1e2s1sbz
- SHA256 ba7860a87e3051fbc873d9bdd0a65d710eb26137eeaa39729dda03b80e33b9d8
- MD5 907ae8e562dcc417748d7c3ed95105ec
- SHA1 42e3d8893bee34a9b669b82df3d486b41f6ebe1b
- SHA512 482956ba1741b19bd65db5f8d9f9294ed69224ceba00c130fafe8e30a57aa088fd6341c7e10a3fbc2d7635d5af958e4e997a1c4295efed17d0d86e513889a133
- SSDEEP 12288:NJeJfEuGstgg/kjp98zHpie5ns4bUsySXy:NJeJfAqkjp98zHpieds4Ryc
- TLSH T153A5BF1372E1B1F1D85624F50F67937557FA7C305A36AE0763D43E2B6A311A0AA3A323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_907ae8e562dcc417748d7c3ed95105ec_elex_stop.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_907ae8e562dcc417748d7c3ed95105ec_elex_stop.exe
Resource
win11ltsc2024-20260710-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_907ae8e562dcc417748d7c3ed95105ec_elex_stop
- Size 2.0MB
- SHA256 ba7860a87e3051fbc873d9bdd0a65d710eb26137eeaa39729dda03b80e33b9d8
- MD5 907ae8e562dcc417748d7c3ed95105ec
- SHA1 42e3d8893bee34a9b669b82df3d486b41f6ebe1b
- SHA512 482956ba1741b19bd65db5f8d9f9294ed69224ceba00c130fafe8e30a57aa088fd6341c7e10a3fbc2d7635d5af958e4e997a1c4295efed17d0d86e513889a133
- SSDEEP 12288:NJeJfEuGstgg/kjp98zHpie5ns4bUsySXy:NJeJfAqkjp98zHpieds4Ryc
- TLSH T153A5BF1372E1B1F1D85624F50F67937557FA7C305A36AE0763D43E2B6A311A0AA3A323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies WinLogon for persistence
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1