2026-08-10_cfd84dc2bedfddefa39c77335b1800c1_elex_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_cfd84dc2bedfddefa39c77335b1800c1_elex_stop
Size 7.1MB
Sample260810-cbmccade36
SHA256 cb44863bd11ed080f69bccc12d5e3ca49f203a56e378729c2eae9361fe786d5f
MD5 cfd84dc2bedfddefa39c77335b1800c1
SHA1 d2cf2cecff761089f3f5a5e9a3e4480ac836e739
SHA512 97761ca1c73c05d06c999ae0777c86e8d86fe5a0cc5e03659fb0415c6f6114c60abc53a71ea9be6b5ef4004f243d9a048a1d95872b4d7e6ea89b156b3b1fc6fc
SSDEEP 196608:2Y37DVUV1tFDoMDuWZqe1BTESnx0BJIhbHjxuIFvrP:6FkMapkxV
TLSH
T1737602437BF6C4B8CA8F55B811725B6BA7B7AE01071154C3E7D03F89A931FC2A631692
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_cfd84dc2bedfddefa39c77335b1800c1_elex_stop

File Explorer

2026-08-10_cfd84dc2bedfddefa39c77335b1800c1_elex_stop

.exe 7.1MB

2026-08-10_cfd84dc2bedfddefa39c77335b1800c1_elex_stop

IMPHASH 44208814f6cf797bb6a6047ef3b163a5
SHA256 cb44863bd11ed080f69bccc12d5e3ca49f203a56e378729c2eae9361fe786d5f
MD5 cfd84dc2bedfddefa39c77335b1800c1
SHA1 d2cf2cecff761089f3f5a5e9a3e4480ac836e739
SHA512 97761ca1c73c05d06c999ae0777c86e8d86fe5a0cc5e03659fb0415c6f6114c60abc53a71ea9be6b5ef4004f243d9a048a1d95872b4d7e6ea89b156b3b1fc6fc
SSDEEP 196608:2Y37DVUV1tFDoMDuWZqe1BTESnx0BJIhbHjxuIFvrP:6FkMapkxV
TLSH
T1737602437BF6C4B8CA8F55B811725B6BA7B7AE01071154C3E7D03F89A931FC2A631692
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

315656

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcmpiW SetEnvironmentVariableW FreeLibrary GetModuleFileNameW LoadLibraryW lstrcatW lstrlenW WideCharToMultiByte GetTickCount InterlockedIncrement InterlockedDecrement SetLastError HeapFree GetProcessHeap HeapReAlloc HeapAlloc FindResourceExA GetUserDefaultUILanguage GetPrivateProfileStringW GetLastError GetEnvironmentVariableA CompareStringW SetEvent GetCurrentProcessId CloseHandle WaitForSingleObject CompareStringA lstrcpyW FindFirstFileW FindClose FormatMessageA WriteFile GetSystemTimeAsFileTime SetFileTime CreateFileA ReadFile IsBadReadPtr CreateEventA GetModuleFileNameA SetFilePointer GetModuleHandleW GetCurrentProcess GetWindowsDirectoryA GetVolumeInformationA GetFileAttributesExA GetFullPathNameA FindFirstFileExA FindNextFileA IsWow64Process SetEnvironmentVariableA IsBadWritePtr VirtualProtect FlushInstructionCache WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers SetStdHandle GetLocaleInfoW IsValidLocale EnumSystemLocalesA GetUserDefaultLCID QueryPerformanceCounter GetCommandLineW GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetConsoleMode GetConsoleCP GetStartupInfoA GetFileType SetHandleCount GetStringTypeW GetStringTypeA IsValidCodePage GetOEMCP GetTimeZoneInformation GetCurrentThreadId TlsFree TlsSetValue TlsAlloc TlsGetValue GetStdHandle HeapCreate VirtualFree GetCPInfo LCMapStringW LCMapStringA RtlUnwind GetStartupInfoW IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess CreateThread ResumeThread ExitThread GetSystemInfo VirtualAlloc HeapSize HeapDestroy GetThreadLocale GetLocaleInfoA GetACP GetVersionExA RaiseException VirtualQuery lstrcmpiA ExitProcess lstrcmpA LoadLibraryA GetProcAddress DeleteCriticalSection InitializeCriticalSection MultiByteToWideChar Sleep WaitForMultipleObjects GlobalFree InterlockedExchange GlobalUnlock LeaveCriticalSection GlobalLock GlobalAlloc EnterCriticalSection LockResource LoadResource SizeofResource FindResourceA lstrcpyA lstrlenA GetModuleHandleA

user32

UnregisterClassA LoadCursorA GetWindowLongA GetWindowRect SetCursor GetWindowTextA MessageBoxW SetWindowLongA GetSystemMetrics GetCursorPos GetParent MapWindowPoints GetDesktopWindow SendMessageA SetWindowPos ReleaseCapture SetForegroundWindow PostMessageA BeginPaint GetMessageA TranslateMessage DrawIcon DispatchMessageA LoadIconA CreateDialogIndirectParamA SetTimer EndPaint KillTimer DestroyWindow EndDialog PtInRect GetDC FillRect GetClientRect ReleaseDC SetClassLongA wsprintfA DefWindowProcA ShowWindow SetFocus TranslateAcceleratorA DrawFocusRect OffsetRect DrawTextA LoadImageA SetCapture LoadStringA ScreenToClient DrawEdge InvalidateRect GetWindowTextLengthA SetWindowTextA GetClassNameA PostQuitMessage TrackMouseEvent SetActiveWindow IsDialogMessageA CallWindowProcA EnableWindow GetActiveWindow UpdateWindow AdjustWindowRectEx CreateWindowExA RegisterClassExA MessageBoxA

gdi32

GetDIBColorTable SetDIBColorTable StretchBlt CreateFontIndirectA DeleteObject CreateDIBSection CreateSolidBrush SelectObject MoveToEx CreatePen CreateCompatibleBitmap BitBlt CreateCompatibleDC TextOutA DeleteDC SetTextColor GetStockObject SetBkMode GetTextExtentPointA LineTo GetObjectA

advapi32

RegQueryValueExA RegDeleteValueA RegCreateKeyExA RegCloseKey RegSetValueExA

shell32

SHGetFolderPathA

ole32

CoInitializeEx CoUninitialize CoSetProxyBlanket CoCreateInstance CreateStreamOnHGlobal

oleaut32

GetErrorInfo SafeArrayDestroy SafeArrayGetElement SafeArrayPutElement SafeArrayGetLBound SafeArrayGetUBound SysAllocStringLen VariantChangeType VariantClear VariantTimeToSystemTime SystemTimeToVariantTime SysFreeString SysStringLen SafeArrayCreateVector SafeArrayAccessData SafeArrayUnaccessData SysAllocString VariantInit

gdiplus

GdipAlloc GdipFree GdiplusShutdown GdiplusStartup GdipCreateBitmapFromScan0 GdipDisposeImage GdipGetImagePalette GdipDeleteGraphics GdipGetImagePaletteSize GdipGetImageGraphicsContext GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipCloneImage GdipBitmapUnlockBits GdipBitmapLockBits GdipDrawImageI GdipCreateBitmapFromStream

msimg32

AlphaBlend TransparentBlt

iphlpapi

GetAdaptersInfo

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_cfd84dc2bedfddefa39c77335b1800c1_elex_stop

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

gdiplus

msimg32

iphlpapi

version

generic