General
- Target 2026-08-19_b104a6247d16ff3ecd8b9f071472f7e3_elex_stop
- Size 1.8MB
- Sample260819-3zzwfswdpg
- SHA256 2d0907c5cd87d06836a5ef36d7d40810eb643386abc8283533c69f5cdcd09a3d
- MD5 b104a6247d16ff3ecd8b9f071472f7e3
- SHA1 18f561600608c0a60e91a5251e4ae908866728d2
- SHA512 f4a5cc8f6dd6f05f0792d08af9891fa2058303c2c1fa51ecd9c43396c1b85df8cd10ab34cf6094092ff3404194067b26659394f6a08ca068ab3e2c982453869a
- SSDEEP 6144:fpqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnCH:fpqiC/2OGAtkCP4cejGSOpRK3CnIi
- TLSH T1D0858E0273D680F1D85238711567E26A9B797D154726CE9BEBE03E339D311B0AF2A372
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-19_b104a6247d16ff3ecd8b9f071472f7e3_elex_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_b104a6247d16ff3ecd8b9f071472f7e3_elex_stop
- Size 1.8MB
- SHA256 2d0907c5cd87d06836a5ef36d7d40810eb643386abc8283533c69f5cdcd09a3d
- MD5 b104a6247d16ff3ecd8b9f071472f7e3
- SHA1 18f561600608c0a60e91a5251e4ae908866728d2
- SHA512 f4a5cc8f6dd6f05f0792d08af9891fa2058303c2c1fa51ecd9c43396c1b85df8cd10ab34cf6094092ff3404194067b26659394f6a08ca068ab3e2c982453869a
- SSDEEP 6144:fpqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnCH:fpqiC/2OGAtkCP4cejGSOpRK3CnIi
- TLSH T1D0858E0273D680F1D85238711567E26A9B797D154726CE9BEBE03E339D311B0AF2A372
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Adds Run key to start application
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1