2026-08-24_7ad9cc2524be9f55884cd7627cf03bc1_elex_mespinoza

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-24_7ad9cc2524be9f55884cd7627cf03bc1_elex_mespinoza
Size 13.9MB
Sample260825-ls4gmazeja
SHA256 c363d9509a7bb81aa26199c7c3aa2ae35f8e0962d1b6b6c36fb9481364d3e460
MD5 7ad9cc2524be9f55884cd7627cf03bc1
SHA1 de525dad46c67249910ed3c5a60412bc67bb0321
SHA512 b488568cd916030fa843ab4e58b2a53ae142d940c9af6338161ae4b095c8baf95c2a6853d019fea35f7c73c7e9122b7a312f46facb718da9ae928c7ef3e8edca
SSDEEP 393216:a71Kw/jKCJ76UZ+OYw249u/Yhmr2KLEDDYbgrTf36dbg:axKlCJ7mOlq/YhO2KL2Yb6Tf36dbg
TLSH
T152E63337D6D62458F0B8B17A5BF2FEBAAB58BDED80454E33119831466B601423E83C77
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-08-24_7ad9cc2524be9f55884cd7627cf03bc1_elex_mespinoza

.exe 13.9MB

2026-08-24_7ad9cc2524be9f55884cd7627cf03bc1_elex_mespinoza

SHA256 c363d9509a7bb81aa26199c7c3aa2ae35f8e0962d1b6b6c36fb9481364d3e460
MD5 7ad9cc2524be9f55884cd7627cf03bc1
SHA1 de525dad46c67249910ed3c5a60412bc67bb0321
SHA512 b488568cd916030fa843ab4e58b2a53ae142d940c9af6338161ae4b095c8baf95c2a6853d019fea35f7c73c7e9122b7a312f46facb718da9ae928c7ef3e8edca
SSDEEP 393216:a71Kw/jKCJ76UZ+OYw249u/Yhmr2KLEDDYbgrTf36dbg:axKlCJ7mOlq/YhO2KL2Yb6Tf36dbg
TLSH
T152E63337D6D62458F0B8B17A5BF2FEBAAB58BDED80454E33119831466B601423E83C77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

b4:7c:b0:43:29:f6:6b:92:37:2d:5e:c3:ac:59:84:2c:65:4f:1a:f4:97:d3:65:7e:5e:45:7e:f3:24:af:65:4b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Projektas 25\, MB,O=Projektas 25\, MB,STREET=Silutes plentas 39,L=Klaipeda,ST=Klaipėdos apskritis,C=LT

Chains

Nov 17, 2020

CN=Projektas 25\, MB,O=Projektas 25\, MB,STREET=Silutes plentas 39,L=Klaipeda,ST=Klaipėdos apskritis,C=LT

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

CN=Projektas 25\, MB,O=Projektas 25\, MB,STREET=Silutes plentas 39,L=Klaipeda,ST=Klaipėdos apskritis,C=LT

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

e0:ef:66:33:0d:e7:ec:b5:7d:d9:17:cd:5a:42:16:49:b2:c8:4b:f8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Projektas 25\, MB,O=Projektas 25\, MB,STREET=Silutes plentas 39,L=Klaipeda,ST=Klaipėdos apskritis,C=LT

Chains

Nov 17, 2020

CN=Projektas 25\, MB,O=Projektas 25\, MB,STREET=Silutes plentas 39,L=Klaipeda,ST=Klaipėdos apskritis,C=LT

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

CN=Projektas 25\, MB,O=Projektas 25\, MB,STREET=Silutes plentas 39,L=Klaipeda,ST=Klaipėdos apskritis,C=LT

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:52:d7

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Jan 28, 2028

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Serial Number

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 24, 2016 - Jun 24, 2027

Subject

CN=Projektas 25\, MB,O=Projektas 25\, MB,STREET=Silutes plentas 39,L=Klaipeda,ST=Klaipėdos apskritis,C=LT

Serial Number

7e:98:c4:2b:3b:a9:c8:a0:ea:95:ee:e6:fb:39:23:9f

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 8, 2020 - Jul 8, 2021

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Serial Number

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 12, 2019 - Dec 31, 2028

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG

Serial Number

11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 24, 2016 - Jun 24, 2027

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

788KB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

221KB

Virtual Size

692KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

5KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

24KB

Virtual Size

108KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

12.4MB

Virtual Size

40.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

59KB

Virtual Size

140KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

430KB

Virtual Size

432KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-24_7ad9cc2524be9f55884cd7627cf03bc1_elex_mespinoza

generic