General
- Target 2026-09-09_db5902dea19e9759b8797ba1a89dd44c_elex
- Size 659KB
- Sample260910-2p9ggayzdy
- SHA256 782e0f99f905532164339e05e99cb1235a87e6e5ba214c12593446c6f5942560
- MD5 db5902dea19e9759b8797ba1a89dd44c
- SHA1 094ea0e9c3d81b3a07ec12df96b408cf22f6f55b
- SHA512 01c753e0a51f8dd6a2f9e8a96305f3410b6651c27ca5b82cc5138d5cad3a0f2ba8d998f178cc1a673d9110dada43cff9bb02c66b2962fb25e809f5db71854caa
- SSDEEP 12288:ZflIWFJ1H0iDqKt9FBmTt5m0IdADeU9jz7u:Zfl3OSq2PEIdADeU9jz
- TLSH T118E4124236E40096E1B31E716EB85760CAB6FE71A9B4DA0FCB00B94F68B4F65D53131B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-09_db5902dea19e9759b8797ba1a89dd44c_elex.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_db5902dea19e9759b8797ba1a89dd44c_elex.exe
Resource
win11ltsc2024-20260709-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_db5902dea19e9759b8797ba1a89dd44c_elex
- Size 659KB
- SHA256 782e0f99f905532164339e05e99cb1235a87e6e5ba214c12593446c6f5942560
- MD5 db5902dea19e9759b8797ba1a89dd44c
- SHA1 094ea0e9c3d81b3a07ec12df96b408cf22f6f55b
- SHA512 01c753e0a51f8dd6a2f9e8a96305f3410b6651c27ca5b82cc5138d5cad3a0f2ba8d998f178cc1a673d9110dada43cff9bb02c66b2962fb25e809f5db71854caa
- SSDEEP 12288:ZflIWFJ1H0iDqKt9FBmTt5m0IdADeU9jz7u:Zfl3OSq2PEIdADeU9jz
- TLSH T118E4124236E40096E1B31E716EB85760CAB6FE71A9B4DA0FCB00B94F68B4F65D53131B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detected Nirsoft tools
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1