General
- Target 2026-08-15_eb13814bc29ab4b3e31156362fe4aad7_elex_mafia
- Size 910KB
- Sample260815-bd8spawyaz
- SHA256 b840c277dc6dfc44658b66e9cfa2f1e0c1d71d15570cf68e416d8eb75416c7c2
- MD5 eb13814bc29ab4b3e31156362fe4aad7
- SHA1 6776a4b59f7aa1977433fffff7e99f76f3ef40a3
- SHA512 3abc4c51eda42669be3b5fb745bce134cfee2f110755b607c9cd2ab60f1dfe53d78b9bc5008f2f5363b46c343ccf7d300f2fd9e56388b1f4bff6a6d679e343f1
- SSDEEP 24576:3w8bvuA6GRIwIXW/8yw1ez54lIYF5SXYH+:3wtAnRm9bC4lIl1
- TLSH T17C15BF22F68780F3D95120B0547ADB725A39BE3547369AD37BE03D3A6D302C1663A35E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_eb13814bc29ab4b3e31156362fe4aad7_elex_mafia.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_eb13814bc29ab4b3e31156362fe4aad7_elex_mafia.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_eb13814bc29ab4b3e31156362fe4aad7_elex_mafia
- Size 910KB
- SHA256 b840c277dc6dfc44658b66e9cfa2f1e0c1d71d15570cf68e416d8eb75416c7c2
- MD5 eb13814bc29ab4b3e31156362fe4aad7
- SHA1 6776a4b59f7aa1977433fffff7e99f76f3ef40a3
- SHA512 3abc4c51eda42669be3b5fb745bce134cfee2f110755b607c9cd2ab60f1dfe53d78b9bc5008f2f5363b46c343ccf7d300f2fd9e56388b1f4bff6a6d679e343f1
- SSDEEP 24576:3w8bvuA6GRIwIXW/8yw1ez54lIYF5SXYH+:3wtAnRm9bC4lIl1
- TLSH T17C15BF22F68780F3D95120B0547ADB725A39BE3547369AD37BE03D3A6D302C1663A35E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
3