General
- Target 2026-08-27_cbafc3c1f02177cdbfaec59d3cc12eb6_elex_hive
- Size 2.4MB
- Sample260827-j912qagg74
- SHA256 9835bdcf4b8339bc569e878ba81e1010e761953a175a95a264b95782805e3aaf
- MD5 cbafc3c1f02177cdbfaec59d3cc12eb6
- SHA1 1451a6503f63a50cb4a9ac9ae012227c053dc8bc
- SHA512 9ebe7802fd78523a6e3da349c03546d3051131324e03524229361c6f50f7a6ab8b7378cf5a71c2748f0dedc35b8469043e6e6cfe3f6036ab9c53ad98271d55f0
- SSDEEP 49152:kBf6cJCCzabguXs/dgDJCVQTfIpYBo8EpfIC5DIFxHz405r8a:k1Fl2QGkVqg8EpgC5DILHz4F
- TLSH T1FBC53397AE09EC1FC351A2352B56E392FCF1055CC63113B23F22BEA15A5870BD376692
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target 2026-08-27_cbafc3c1f02177cdbfaec59d3cc12eb6_elex_hive
- Size 2.4MB
- SHA256 9835bdcf4b8339bc569e878ba81e1010e761953a175a95a264b95782805e3aaf
- MD5 cbafc3c1f02177cdbfaec59d3cc12eb6
- SHA1 1451a6503f63a50cb4a9ac9ae012227c053dc8bc
- SHA512 9ebe7802fd78523a6e3da349c03546d3051131324e03524229361c6f50f7a6ab8b7378cf5a71c2748f0dedc35b8469043e6e6cfe3f6036ab9c53ad98271d55f0
- SSDEEP 49152:kBf6cJCCzabguXs/dgDJCVQTfIpYBo8EpfIC5DIFxHz405r8a:k1Fl2QGkVqg8EpgC5DILHz4F
- TLSH T1FBC53397AE09EC1FC351A2352B56E392FCF1055CC63113B23F22BEA15A5870BD376692
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables containing base64 encoded User Agent
-
UPX dump on OEP (original entry point)
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.