2026-09-03_7d08c8cc33e2a4d8797cfd25441514ce_elex_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-03_7d08c8cc33e2a4d8797cfd25441514ce_elex_stop
Size 1.1MB
Sample260905-26ecnavajc
SHA256 270e7c82b5ed4d30b8f277535299346dfa8861ed854933985d98bda53dff7eec
MD5 7d08c8cc33e2a4d8797cfd25441514ce
SHA1 3309ebf5906e1034b2760a80b195809f653c4894
SHA512 312659f0153969ab6cdfebe2798dd1fb19708a86ee10fd5731abb5561848e6f71cfe41b2791035b85c9245f776340d8c8e72ee5da53b9e0be1d4787ed200dffa
SSDEEP 24576:b6Zv2JbWOSY4He8K2rbrojTQytX3YNgDhdkMRWfLTUO2ZR+8:bE2TL4rK2EjTQKnYmdkMgl2ZV
TLSH
T14835027376C1A0F3DD4214F11716A739BABB9C352635AD83EBD10E927A20921B63F643
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-03_7d08c8cc33e2a4d8797cfd25441514ce_elex_stop

File Explorer

2026-09-03_7d08c8cc33e2a4d8797cfd25441514ce_elex_stop

.exe 1.1MB

2026-09-03_7d08c8cc33e2a4d8797cfd25441514ce_elex_stop

IMPHASH 6f259aa39ae2d65ed9443828fb4ac812
SHA256 270e7c82b5ed4d30b8f277535299346dfa8861ed854933985d98bda53dff7eec
MD5 7d08c8cc33e2a4d8797cfd25441514ce
SHA1 3309ebf5906e1034b2760a80b195809f653c4894
SHA512 312659f0153969ab6cdfebe2798dd1fb19708a86ee10fd5731abb5561848e6f71cfe41b2791035b85c9245f776340d8c8e72ee5da53b9e0be1d4787ed200dffa
SSDEEP 24576:b6Zv2JbWOSY4He8K2rbrojTQytX3YNgDhdkMRWfLTUO2ZR+8:bE2TL4rK2EjTQKnYmdkMgl2ZV
TLSH
T14835027376C1A0F3DD4214F11716A739BABB9C352635AD83EBD10E927A20921B63F643
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

54576

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

GetUserNameA RegOpenKeyExA RegCreateKeyA RegQueryValueExA RegCloseKey RegSetValueExA RegDeleteValueA RegDeleteKeyA RegEnumKeyA RegEnumValueA LookupPrivilegeValueA OpenProcessToken AdjustTokenPrivileges OpenSCManagerA EnumServicesStatusA CloseServiceHandle OpenServiceA ControlService StartServiceA

gdi32

GetStockObject CreateCompatibleDC CreateCompatibleBitmap SelectObject BitBlt GetDIBits DeleteDC

kernel32

GetVersion GetWindowsDirectoryA GetSystemDirectoryA GetModuleFileNameA GetVolumeInformationA Sleep DeleteFileA OpenProcess TerminateProcess OpenMutexA CreateMutexA CloseHandle SetErrorMode GetLastError CreateThread CopyFileA MoveFileA RemoveDirectoryA CreateDirectoryA CreateFileA GetFileTime CompareFileTime GetFileSize SetFilePointer WriteFile SetFileTime LoadLibraryA GetProcAddress FreeLibrary GetVersionExA GetComputerNameA GetLocaleInfoA GetSystemTime GetLocalTime GlobalMemoryStatus GetTickCount WideCharToMultiByte GetDriveTypeA FindFirstFileA FileTimeToLocalFileTime FileTimeToSystemTime FindNextFileA FindClose GetCurrentProcess SetPriorityClass GetCurrentProcessId CreateProcessA GetStdHandle GetFileType ReadFile ExitProcess GetCommandLineA GetStartupInfoA GetModuleHandleA TlsAlloc TlsFree TlsSetValue TlsGetValue InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetEnvironmentStrings FreeEnvironmentStringsA GlobalAlloc GlobalFree

mpr

WNetAddConnection2A WNetCancelConnectionA WNetOpenEnumA WNetEnumResourceA WNetCloseEnum

rasapi32

RasEnumEntriesA RasGetEntryDialParamsA

user32

MessageBoxA LoadCursorA LoadIconA RegisterClassA CreateWindowExA ShowWindow SetTimer GetMessageA TranslateMessage DispatchMessageA MessageBeep PostMessageA GetSystemMetrics mouse_event GetDoubleClickTime DefWindowProcA OemToCharBuffA EnumDisplaySettingsA CharToOemA PostQuitMessage GetCursorPos KillTimer CharUpperBuffA GetDC ReleaseDC ExitWindowsEx EnumWindows GetWindowTextA GetClassNameA GetWindowThreadProcessId IsWindowVisible GetWindowPlacement

wsock32

WSAStartup closesocket WSACleanup accept WSAAsyncSelect recv send recvfrom htons socket bind listen gethostname gethostbyname ntohl ioctlsocket WSAAsyncGetHostByName connect

Name

.text

Size

63KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.exc

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

21KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sdata

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-03_7d08c8cc33e2a4d8797cfd25441514ce_elex_stop

advapi32

gdi32

kernel32

mpr

rasapi32

user32

wsock32

generic