General
- Target 2026-08-27_0a5a06a52cfe1560b81a149337735498_elex_virlock
- Size 1.6MB
- Sample260827-3rns8a1hjc
- SHA256 ab8968f8019d05f86620bd7f0373b8a415cd7a5b90eff747bbace11a91514c44
- MD5 0a5a06a52cfe1560b81a149337735498
- SHA1 b4dc17a56d59a5d3af7eeb2fe6267535795b7e8d
- SHA512 eccd1fcf789d3416cd3af52a67631cce59e14fecce29e14e4458ced910541accf1d8b92122d84d46eed72e21ee630c1cbdacc1ff3bd138d02de50b638e988be0
- SSDEEP 12288:Oa650PuMUmjrxGRDBuribR12VdLGmIEmnUHjSxdLPbJMzSBusO:OX502M2Amb32xsnSUCu7O
- TLSH T12175FB4C24A979CEC81A5BED57C43C40D562A40DE1D11BE20B6CDAFA18227BB631BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_0a5a06a52cfe1560b81a149337735498_elex_virlock.exe
Resource
win11ltsc2024-20260709-en
11 signatures
900 seconds
Malware Config
Targets
-
- Target 2026-08-27_0a5a06a52cfe1560b81a149337735498_elex_virlock
- Size 1.6MB
- SHA256 ab8968f8019d05f86620bd7f0373b8a415cd7a5b90eff747bbace11a91514c44
- MD5 0a5a06a52cfe1560b81a149337735498
- SHA1 b4dc17a56d59a5d3af7eeb2fe6267535795b7e8d
- SHA512 eccd1fcf789d3416cd3af52a67631cce59e14fecce29e14e4458ced910541accf1d8b92122d84d46eed72e21ee630c1cbdacc1ff3bd138d02de50b638e988be0
- SSDEEP 12288:Oa650PuMUmjrxGRDBuribR12VdLGmIEmnUHjSxdLPbJMzSBusO:OX502M2Amb32xsnSUCu7O
- TLSH T12175FB4C24A979CEC81A5BED57C43C40D562A40DE1D11BE20B6CDAFA18227BB631BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies visibility of file extensions in Explorer
-
UAC bypass
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2Visual Basic
1Windows Command Shell
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1