2026-08-15_abadb2b2466f400906a05b7c98e203f5_elex_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-15_abadb2b2466f400906a05b7c98e203f5_elex_stop
Size 1.4MB
Sample260815-2ce24avbna
SHA256 34aec34efecb827a8a3d7249524fa1430fb61783ed174b465d32a35f92c3c78b
MD5 abadb2b2466f400906a05b7c98e203f5
SHA1 c5c2b5aebb1e6a9a2ce134ca37d5564457e977d1
SHA512 e64f25a5da246179fb55b2151f49e72ad9e5c4ebf36462c847668dd6b39bacf6bd07065b01d3d9127308bc61abe581426d031c0230f6a4f741b64e9c505ae461
SSDEEP 12288:SLrjXByu4a9Xc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3b:SLXv4a9sqjnhMgeiCl7G0nehbGZpbD
TLSH
T19C65012177D0C473C562353249E6D779BA7ABD219B7482877B943F7EAE302D04A3831A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-15_abadb2b2466f400906a05b7c98e203f5_elex_stop

File Explorer

2026-08-15_abadb2b2466f400906a05b7c98e203f5_elex_stop

.exe 1.4MB

2026-08-15_abadb2b2466f400906a05b7c98e203f5_elex_stop

IMPHASH 10c016795af50d67141b52163469c380
SHA256 34aec34efecb827a8a3d7249524fa1430fb61783ed174b465d32a35f92c3c78b
MD5 abadb2b2466f400906a05b7c98e203f5
SHA1 c5c2b5aebb1e6a9a2ce134ca37d5564457e977d1
SHA512 e64f25a5da246179fb55b2151f49e72ad9e5c4ebf36462c847668dd6b39bacf6bd07065b01d3d9127308bc61abe581426d031c0230f6a4f741b64e9c505ae461
SSDEEP 12288:SLrjXByu4a9Xc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3b:SLXv4a9sqjnhMgeiCl7G0nehbGZpbD
TLSH
T19C65012177D0C473C562353249E6D779BA7ABD219B7482877B943F7EAE302D04A3831A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

92893

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FlushFileBuffers SetEndOfFile GetFullPathNameA GetCPInfo GetOEMCP SetErrorMode RaiseException RtlUnwind ExitProcess HeapReAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA VirtualAlloc HeapSize HeapCreate SetFilePointer VirtualFree GetStdHandle GetACP IsValidCodePage InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetTimeZoneInformation LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA WriteFile ReadFile GlobalFlags GetCurrentDirectoryA WritePrivateProfileStringA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GetModuleFileNameW GetModuleHandleW FindFirstFileA FileTimeToLocalFileTime FileTimeToSystemTime FindNextFileA GlobalGetAtomNameA GlobalFindAtomA lstrcmpW GetVersionExA FreeResource GetCurrentProcessId GlobalAddAtomA CreateEventA GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA CompareStringA InterlockedExchange lstrcmpA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree FindResourceA LoadResource LockResource SizeofResource MulDiv lstrlenA GetLocalTime lstrlenW lstrcpynW InterlockedDecrement InterlockedIncrement GetTickCount CreateSemaphoreA GetPrivateProfileStringA GetTempPathA GetFileSize FindClose GetFileAttributesW SetFileAttributesW DeleteFileW MultiByteToWideChar Sleep CreateFileA WideCharToMultiByte GetDriveTypeA LoadLibraryA CreateToolhelp32Snapshot FreeLibrary Process32First Process32Next SetLastError WaitForSingleObject CloseHandle GetModuleFileNameA CreateDirectoryA GetModuleHandleA GetProcAddress GetCurrentProcess VerSetConditionMask VerifyVersionInfoA GetLastError GetProcessHeap HeapAlloc HeapFree

user32

UnregisterClassA DestroyMenu EndPaint BeginPaint ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA LoadCursorA GetDC ReleaseDC GetSysColorBrush ShowWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA LoadIconA SendDlgItemMessageA WinHelpA GetCapture GetClassLongA GetClassNameA SetFocus GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow GetClientRect CreateWindowExA GetClassInfoExA RegisterClassA GetSysColor AdjustWindowRectEx CopyRect PtInRect SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetSystemMetrics SetActiveWindow CreateDialogIndirectParamA DestroyWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage GetMessageTime DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent ModifyMenuA EnableMenuItem CheckMenuItem PostMessageA PostQuitMessage GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu SetPropA EnableWindow RemovePropA CharUpperA GetDesktopWindow GetWindow IsWindow GetPropA SendMessageA GetClassInfoA

gdi32

RectVisible PtVisible GetStockObject DeleteDC ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA GetDeviceCaps DeleteObject SetMapMode RestoreDC SaveDC GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap TextOutA

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

advapi32

RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA GetUserNameA RegQueryValueExA RegDeleteValueA RegQueryInfoKeyA RegEnumValueA RegCloseKey RegOpenKeyExA RegCreateKeyA RegSetValueExA RegCreateKeyExA

shell32

SHGetFolderPathA ShellExecuteA

shlwapi

PathAppendA PathFindExtensionA PathFindFileNameA PathFileExistsW

ole32

CoInitialize CreateClassMoniker GetRunningObjectTable CoUninitialize

oleaut32

VariantClear VariantChangeType VariantInit

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_abadb2b2466f400906a05b7c98e203f5_elex_stop

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

generic