General
- Target 2026-08-24_49c113e1e424c7abda1077bb6a472011_elex_stealc_stop_swisyn
- Size 405KB
- Sample260825-ranw4sap9v
- SHA256 367337c9a9aeb8145865b1a548a414637d10eb78848f2b37f590db4c22b4e57b
- MD5 49c113e1e424c7abda1077bb6a472011
- SHA1 4b4d77463fe0f62ee2125e45c963c905a3206ae7
- SHA512 c92b27d949e486416a07b67afceb3f2c05c8fa37914280d73153b1e89eb13534f5db193d0d1b43a9aa8d88699a6541aa3d20be00da899392e8f0862252fd4529
- SSDEEP 6144:UsLqdufVUNDaG3EG5fRLCv/LnDNhqVAEQBQ:PFUNDaG0T/LnZAVA56
- TLSH T181946C137A60C03AD52255F61859D77DBAB6AD311F60AEC733D06B2D5E702C3BA7820B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_49c113e1e424c7abda1077bb6a472011_elex_stealc_stop_swisyn.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_49c113e1e424c7abda1077bb6a472011_elex_stealc_stop_swisyn.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_49c113e1e424c7abda1077bb6a472011_elex_stealc_stop_swisyn
- Size 405KB
- SHA256 367337c9a9aeb8145865b1a548a414637d10eb78848f2b37f590db4c22b4e57b
- MD5 49c113e1e424c7abda1077bb6a472011
- SHA1 4b4d77463fe0f62ee2125e45c963c905a3206ae7
- SHA512 c92b27d949e486416a07b67afceb3f2c05c8fa37914280d73153b1e89eb13534f5db193d0d1b43a9aa8d88699a6541aa3d20be00da899392e8f0862252fd4529
- SSDEEP 6144:UsLqdufVUNDaG3EG5fRLCv/LnDNhqVAEQBQ:PFUNDaG0T/LnZAVA56
- TLSH T181946C137A60C03AD52255F61859D77DBAB6AD311F60AEC733D06B2D5E702C3BA7820B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2