General
- Target 2026-08-09_04fbb537423374b120d64ed278be0f49_elex_stop
- Size 751KB
- Sample260809-sc6qdagq6y
- SHA256 be267eec348bb25495da7edaaeae7c1bea13eadc375e209f9725bfb32c4b24d3
- MD5 04fbb537423374b120d64ed278be0f49
- SHA1 f11924423328eb940c4a962c5724da6d859c0513
- SHA512 4a6d11974227f043164b43a661bbea8fa95cfbbffac4120199491240e61c34c8d8daa39b9f394544f65eded1bb234958685764e3d1c034e17082a01821d422d5
- SSDEEP 12288:gpqiC/2OGAtkCP4HejGSOpRK3ChYt/T2a+jGx6bB4K:gpo/2+ttPuLfpRK3ChYKGx6bB4K
- TLSH T1A9F47D017FC250F2D75229F11567DE39973A3B153226C68BEF902E264AE06F39F26361
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_04fbb537423374b120d64ed278be0f49_elex_stop.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_04fbb537423374b120d64ed278be0f49_elex_stop.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_04fbb537423374b120d64ed278be0f49_elex_stop
- Size 751KB
- SHA256 be267eec348bb25495da7edaaeae7c1bea13eadc375e209f9725bfb32c4b24d3
- MD5 04fbb537423374b120d64ed278be0f49
- SHA1 f11924423328eb940c4a962c5724da6d859c0513
- SHA512 4a6d11974227f043164b43a661bbea8fa95cfbbffac4120199491240e61c34c8d8daa39b9f394544f65eded1bb234958685764e3d1c034e17082a01821d422d5
- SSDEEP 12288:gpqiC/2OGAtkCP4HejGSOpRK3ChYt/T2a+jGx6bB4K:gpo/2+ttPuLfpRK3ChYKGx6bB4K
- TLSH T1A9F47D017FC250F2D75229F11567DE39973A3B153226C68BEF902E264AE06F39F26361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies WinLogon for persistence
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Adds Run key to start application
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1