General
- Target 2026-08-18_997045cb9feb0103ac49138d58557992_elex_hijackloader_stop_swisyn
- Size 12.3MB
- Sample260818-vtwylsem4z
- SHA256 838e701997bd7974af01c335f3bb210ba964bf4d392a8b8ff4883e17a6345a31
- MD5 997045cb9feb0103ac49138d58557992
- SHA1 a725b57f410ba15f1f83da7ffca78112c9482e8a
- SHA512 200ab7b71d8e4a28e1780d3ebd7109a3c1aa5d4662553de2fba963a72f5a2be7dddea54f5ac2ab300693e24262e8458183de8def4f079c090ef3665d57589d03
- SSDEEP 196608:eH14G7PwPWpGplR806IIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIA8ZN:PPWpGplR8ZWN
- TLSH T172D67D62F341C5B1DA461876CC2795FC4D677CBADF2898EF61893D21F4B23D1287A20A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_997045cb9feb0103ac49138d58557992_elex_hijackloader_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_997045cb9feb0103ac49138d58557992_elex_hijackloader_stop_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_997045cb9feb0103ac49138d58557992_elex_hijackloader_stop_swisyn
- Size 12.3MB
- SHA256 838e701997bd7974af01c335f3bb210ba964bf4d392a8b8ff4883e17a6345a31
- MD5 997045cb9feb0103ac49138d58557992
- SHA1 a725b57f410ba15f1f83da7ffca78112c9482e8a
- SHA512 200ab7b71d8e4a28e1780d3ebd7109a3c1aa5d4662553de2fba963a72f5a2be7dddea54f5ac2ab300693e24262e8458183de8def4f079c090ef3665d57589d03
- SSDEEP 196608:eH14G7PwPWpGplR806IIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIA8ZN:PPWpGplR8ZWN
- TLSH T172D67D62F341C5B1DA461876CC2795FC4D677CBADF2898EF61893D21F4B23D1287A20A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory