2026-08-17_3b089681097e545524b6bea4d916d3f1_elex_mafia

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-17_3b089681097e545524b6bea4d916d3f1_elex_mafia
Size 2.2MB
Sample260818-awd6cssgme
SHA256 728fd02724bf9339ea0e176e24ddbcbb098e7c051b10bc8c425339f46e4791b0
MD5 3b089681097e545524b6bea4d916d3f1
SHA1 0bb388547b475aac3f18fcb8d2743252a77c769f
SHA512 eb678dbbadc73ce5bcff3561bb1469e1ec17f5433e65743ad6314876c50a920300d30d5d0ce809fa1b1237c10c2172d9b2cbb9c2a36a8237dc3491362d330ab1
SSDEEP 49152:TYiYFIhztvW0hfEjqdGUq/Ce1eXc7VpSJBFHyt3ZZ0Ru:TYdFqtvWxqFq/71eXcxp+zyRHL
TLSH
T112B5F1257A64807AE2B226708B3F665605ADB8394FF250C7B3DA070F1D7A5E15F33263
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-17_3b089681097e545524b6bea4d916d3f1_elex_mafia

File Explorer

2026-08-17_3b089681097e545524b6bea4d916d3f1_elex_mafia

.exe 2.2MB

2026-08-17_3b089681097e545524b6bea4d916d3f1_elex_mafia

IMPHASH 692b976bbef3f23b706abc2a500ac0ed
SHA256 728fd02724bf9339ea0e176e24ddbcbb098e7c051b10bc8c425339f46e4791b0
MD5 3b089681097e545524b6bea4d916d3f1
SHA1 0bb388547b475aac3f18fcb8d2743252a77c769f
SHA512 eb678dbbadc73ce5bcff3561bb1469e1ec17f5433e65743ad6314876c50a920300d30d5d0ce809fa1b1237c10c2172d9b2cbb9c2a36a8237dc3491362d330ab1
SSDEEP 49152:TYiYFIhztvW0hfEjqdGUq/Ce1eXc7VpSJBFHyt3ZZ0Ru:TYdFqtvWxqFq/71eXcxp+zyRHL
TLSH
T112B5F1257A64807AE2B226708B3F665605ADB8394FF250C7B3DA070F1D7A5E15F33263
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

341482

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\work\git\binaries\Installer\Release\ZonaInstallerFull.pdb

uxtheme

DrawThemeText IsThemeActive DrawThemeBackground OpenThemeData

shlwapi

wnsprintfW PathIsDirectoryW StrToIntW ord12

gdiplus

GdipLoadImageFromStream GdipGetImageBounds GdipCreatePen1 GdipDrawLineI GdipCreateFromHDC GdipAlloc GdipDeletePen GdipFree GdiplusStartup GdipCreateBitmapFromStream GdipDeleteGraphics GdipDisposeImage GdipCloneImage GdipDrawImageRectI

kernel32

LoadResource WaitForSingleObject GetLastError CloseHandle GetTempFileNameW FindFirstFileW SetFilePointer GetDriveTypeW CreateProcessW SystemTimeToFileTime GetCurrentProcess GetLogicalDriveStringsW CreateDirectoryW GlobalLock GetModuleHandleW WriteFile GlobalAlloc WideCharToMultiByte Sleep SizeofResource GetVersionExW GetExitCodeProcess GetFileAttributesW TerminateProcess ReadFile GetModuleFileNameW CreateFileW MultiByteToWideChar GlobalUnlock GetTempPathW GetFileSizeEx SetLastError GetProcAddress GlobalFree FindClose Process32FirstW LocalAlloc RemoveDirectoryW CreatePipe Process32NextW GetModuleHandleA FindNextFileW CreateToolhelp32Snapshot GetShortPathNameW GetDiskFreeSpaceExW LocalFree GetSystemTime SetFileAttributesW ExpandEnvironmentStringsW GetTickCount InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetSystemDefaultLangID EnumSystemLocalesA FreeResource GetFileSize FormatMessageW InterlockedDecrement FindResourceW TerminateThread CreateThread GlobalMemoryStatusEx GetCurrentProcessId VerSetConditionMask VerifyVersionInfoW GetWindowsDirectoryW GetOEMCP GetACP FlushFileBuffers GetConsoleMode GetConsoleCP HeapSize QueryPerformanceCounter GetCurrentThreadId TlsFree TlsSetValue TlsGetValue TlsAlloc GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetLocaleInfoW GetStdHandle HeapDestroy HeapCreate IsProcessorFeaturePresent IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter CompareStringW LCMapStringW RtlUnwind RaiseException GetCPInfo ExitProcess FileTimeToLocalFileTime FileTimeToSystemTime FindFirstFileExW HeapAlloc GetSystemTimeAsFileTime CreateMutexW GetLongPathNameW DeleteFileW DeleteCriticalSection IsValidCodePage LoadLibraryW GetUserDefaultLCID lstrlenA IsValidLocale SetStdHandle WriteConsoleW GetTimeZoneInformation SetEnvironmentVariableW SetEndOfFile GetProcessHeap SetEnvironmentVariableA GetVolumeInformationW GetExitCodeThread LockResource FindResourceExW GetLocaleInfoA GetUserDefaultLangID HeapReAlloc GetStartupInfoW HeapSetInformation GetCommandLineW HeapFree DecodePointer EncodePointer GetStringTypeW InterlockedExchange InterlockedCompareExchange InterlockedIncrement

user32

SetWindowPos SetWindowLongW GetWindowLongW LoadIconW RegisterClassExW LoadAcceleratorsW CreateWindowExW GetClientRect LoadCursorW PostQuitMessage GetMessageW GetDesktopWindow GetSystemMetrics MessageBoxW SendMessageW DrawTextW DefWindowProcW DispatchMessageW TranslateMessage ShowWindow UpdateWindow PostMessageW GetWindowRect GetClassInfoW EndPaint BeginPaint CallWindowProcW DrawStateW DrawFrameControl wsprintfW DestroyWindow InvalidateRect GetWindowTextW EnableWindow SetWindowTextW TranslateAcceleratorW

gdi32

SetTextAlign SetTextColor SetBkMode GetTextColor GetTextExtentPoint32W CreateFontW DeleteDC SelectObject CreateCompatibleDC TextOutW

advapi32

OpenProcessToken GetUserNameA RegSetValueExW RegCloseKey RegEnumKeyExW RegOpenKeyExW RegDeleteValueW RegOpenKeyW RegQueryValueExW EqualSid RegCreateKeyExW GetTokenInformation

shell32

SHCreateDirectoryExW SHGetMalloc SHGetPathFromIDListW SHChangeNotify ShellExecuteExW SHGetFolderPathW ShellExecuteW ord165 SHFileOperationW CommandLineToArgvW SHBrowseForFolderW

ole32

OleRun CoSetProxyBlanket CoInitializeSecurity CreateStreamOnHGlobal CLSIDFromProgID CoCreateGuid StringFromGUID2 CoCreateInstance CoInitialize CoUninitialize

oleaut32

GetErrorInfo SysFreeString VariantClear SysAllocString

wininet

InternetQueryOptionW InternetCloseHandle InternetReadFile HttpOpenRequestW HttpQueryInfoW HttpAddRequestHeadersW InternetSetOptionW HttpSendRequestW InternetConnectW InternetCrackUrlW InternetOpenW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-17_3b089681097e545524b6bea4d916d3f1_elex_mafia

uxtheme

shlwapi

gdiplus

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

wininet

generic