General
- Target 2026-08-11_2e28eed407d17a8d3bce35dc56edfcb8_elex_stop
- Size 1.2MB
- Sample260812-aee2bshd79
- SHA256 d3938d38fb04a943220a791ea7e95e47cf1bec7add2ab74c083c67741a79d8c6
- MD5 2e28eed407d17a8d3bce35dc56edfcb8
- SHA1 9f6427edb9c421f62fe47bb41330c38526961459
- SHA512 919a58fb5a128deffe8403c3ce642eb188bf7b95c78a5dfbe393f7e08ce3a7a0eec4d317cfe30b1a025e4f9a6c688951c5e0cbbf21d4a01b5201e4d847bb144c
- SSDEEP 24576:Xpo/2+ttPJLfpRKzCoSBxEOCcg91TJsoqOnTn:me2PJLazCocyPDJ2sT
- TLSH T11F45C00273D680F1E86238711567E26AA7797D154726CA9BEBE03E379D310B09F2D372
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-11_2e28eed407d17a8d3bce35dc56edfcb8_elex_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_2e28eed407d17a8d3bce35dc56edfcb8_elex_stop.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_2e28eed407d17a8d3bce35dc56edfcb8_elex_stop
- Size 1.2MB
- SHA256 d3938d38fb04a943220a791ea7e95e47cf1bec7add2ab74c083c67741a79d8c6
- MD5 2e28eed407d17a8d3bce35dc56edfcb8
- SHA1 9f6427edb9c421f62fe47bb41330c38526961459
- SHA512 919a58fb5a128deffe8403c3ce642eb188bf7b95c78a5dfbe393f7e08ce3a7a0eec4d317cfe30b1a025e4f9a6c688951c5e0cbbf21d4a01b5201e4d847bb144c
- SSDEEP 24576:Xpo/2+ttPJLfpRKzCoSBxEOCcg91TJsoqOnTn:me2PJLazCocyPDJ2sT
- TLSH T11F45C00273D680F1E86238711567E26AA7797D154726CA9BEBE03E379D310B09F2D372
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies WinLogon for persistence
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Adds Run key to start application
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1