General
- Target 2026-08-20_2b781a8d7bdcd02eadbf968a4ee5f9c2_elex
- Size 1.3MB
- Sample260820-p966made64
- SHA256 f60447c37ecdb6689dc31dfe1081f807283d6ac7971f3dd2fbefd7ed1713c91a
- MD5 2b781a8d7bdcd02eadbf968a4ee5f9c2
- SHA1 83891905281582e286e9b7978c0908ae478e96e2
- SHA512 b5b8c8448e04b6b67b58e94f02c02b223bf430c6da5c80a895c9ea651564f9e3dcc8177b415964bb7d9aa98ec9955c1ac8ecfae44abb4a5a31d3d8c79748d1a7
- SSDEEP 24576:jIjsSBA/vT0AJsWUpBHDerJADjJ/XjKPndJ3m3h3VuQ57l2io:CB9AJ+pPkdEl2io
- TLSH T1FE551993AACB0EB2DDD327F095C753766338DE508A26CF6BE608C5369E936C46C49701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_2b781a8d7bdcd02eadbf968a4ee5f9c2_elex.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_2b781a8d7bdcd02eadbf968a4ee5f9c2_elex.exe
Resource
win11ltsc2024-20260710-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_2b781a8d7bdcd02eadbf968a4ee5f9c2_elex
- Size 1.3MB
- SHA256 f60447c37ecdb6689dc31dfe1081f807283d6ac7971f3dd2fbefd7ed1713c91a
- MD5 2b781a8d7bdcd02eadbf968a4ee5f9c2
- SHA1 83891905281582e286e9b7978c0908ae478e96e2
- SHA512 b5b8c8448e04b6b67b58e94f02c02b223bf430c6da5c80a895c9ea651564f9e3dcc8177b415964bb7d9aa98ec9955c1ac8ecfae44abb4a5a31d3d8c79748d1a7
- SSDEEP 24576:jIjsSBA/vT0AJsWUpBHDerJADjJ/XjKPndJ3m3h3VuQ57l2io:CB9AJ+pPkdEl2io
- TLSH T1FE551993AACB0EB2DDD327F095C753766338DE508A26CF6BE608C5369E936C46C49701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.