General
- Target 2026-08-12_6e7ecce37a9efde1683ebf5de62e58a7_elex_stop
- Size 1.4MB
- Sample260813-bbcx8sydka
- SHA256 2d45c7d35093c513a0e0cea6bc8791b677841f915ca3159e9bb6cd4668cdfd1c
- MD5 6e7ecce37a9efde1683ebf5de62e58a7
- SHA1 4cb8324b87600d20832e7ae514e8ecbf60477221
- SHA512 2a7b4908ce8d4202e2a7bd173214c6284aaf0b123864f892458deadab7ba744a7a393b0f0d3d9d39ae7a8cb3b8c8282d5232180150e2470a0ff929d7dc4235ef
- SSDEEP 24576:Ipw/2+ttPJLfpRK3C1SR4XK2H/Bmk2ba:he2PJLa3C1nXK2H/BBoa
- TLSH T12A65D002B7D680F1D8623C711567E26A9B797D154717CA9BEBE03E279D310B09F2A332
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-12_6e7ecce37a9efde1683ebf5de62e58a7_elex_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_6e7ecce37a9efde1683ebf5de62e58a7_elex_stop.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_6e7ecce37a9efde1683ebf5de62e58a7_elex_stop
- Size 1.4MB
- SHA256 2d45c7d35093c513a0e0cea6bc8791b677841f915ca3159e9bb6cd4668cdfd1c
- MD5 6e7ecce37a9efde1683ebf5de62e58a7
- SHA1 4cb8324b87600d20832e7ae514e8ecbf60477221
- SHA512 2a7b4908ce8d4202e2a7bd173214c6284aaf0b123864f892458deadab7ba744a7a393b0f0d3d9d39ae7a8cb3b8c8282d5232180150e2470a0ff929d7dc4235ef
- SSDEEP 24576:Ipw/2+ttPJLfpRK3C1SR4XK2H/Bmk2ba:he2PJLa3C1nXK2H/BBoa
- TLSH T12A65D002B7D680F1D8623C711567E26A9B797D154717CA9BEBE03E279D310B09F2A332
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies WinLogon for persistence
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Adds Run key to start application
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1