General
- Target 2026-09-04_394d3d1671074a3560aecdfa340f38b9_elex_stop
- Size 1.6MB
- Sample260905-ravpnadm81
- SHA256 28f44dccc2718bba9e7a83ca8b49a8cdc936847cc595acab44bdaa5753bd874c
- MD5 394d3d1671074a3560aecdfa340f38b9
- SHA1 a6084869d4b2cfe1cb2811ae1b64d983b98063cb
- SHA512 d60bd07343055f9964d5a927915cdbf7235484405f3d4787e4617f7c681c2f76d585a6254bb02f8ee08a33d0cf2a0b1c727f6ca33e3b94fd9c6cfa4becfd7fcd
- SSDEEP 24576:T7VKG/tF5T+0jM6UJfz1ET+/pFCkAAYWDhjKeGBXsOvHYA+wnaaafDd70iTWCB:w6F0eMpAAYEhpa4hwaNDd79WCB
- TLSH T180759D10E783C0B5F82314F1454FE7BAA530AE2544318DABF7C8EF15BA72AA27539716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_394d3d1671074a3560aecdfa340f38b9_elex_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_394d3d1671074a3560aecdfa340f38b9_elex_stop
- Size 1.6MB
- SHA256 28f44dccc2718bba9e7a83ca8b49a8cdc936847cc595acab44bdaa5753bd874c
- MD5 394d3d1671074a3560aecdfa340f38b9
- SHA1 a6084869d4b2cfe1cb2811ae1b64d983b98063cb
- SHA512 d60bd07343055f9964d5a927915cdbf7235484405f3d4787e4617f7c681c2f76d585a6254bb02f8ee08a33d0cf2a0b1c727f6ca33e3b94fd9c6cfa4becfd7fcd
- SSDEEP 24576:T7VKG/tF5T+0jM6UJfz1ET+/pFCkAAYWDhjKeGBXsOvHYA+wnaaafDd70iTWCB:w6F0eMpAAYEhpa4hwaNDd79WCB
- TLSH T180759D10E783C0B5F82314F1454FE7BAA530AE2544318DABF7C8EF15BA72AA27539716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE