2026-09-16_f83665c073df3559c131c2f7c9ce7ef3_elex_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-16_f83665c073df3559c131c2f7c9ce7ef3_elex_stop
Size 6.9MB
Sample260916-snee9szyf1
SHA256 ae510e4a4997f2307548f473cf5209a6abb3f26598a6598725a835b90854d4af
MD5 f83665c073df3559c131c2f7c9ce7ef3
SHA1 a2646710204f7394fa643311f0e2696e9fbf3f68
SHA512 2ef1d6c5a454a19bf5572a742049976afa3cb4cefd875e1bda22f83af0bdb3701c8746a77a5b0d789fb754adfaa465f1b2c529de94e2bae2c5659e2714488726
SSDEEP 196608:jA50jxIjMlPpZN6WMDkFgUY8ChHAVM8P3xSgJ+IMp:jEI2MlRZ5fDTM8P3ggJ/Q
TLSH
T12E7601176581803EE2721A718C6F5E7446E12D2B7E32461FB584FFA82EF7D427923B06
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-09-16_f83665c073df3559c131c2f7c9ce7ef3_elex_stop

.exe 6.9MB

2026-09-16_f83665c073df3559c131c2f7c9ce7ef3_elex_stop

IMPHASH cb41acd7b00b277e4243b9e9f05d709f
SHA256 ae510e4a4997f2307548f473cf5209a6abb3f26598a6598725a835b90854d4af
MD5 f83665c073df3559c131c2f7c9ce7ef3
SHA1 a2646710204f7394fa643311f0e2696e9fbf3f68
SHA512 2ef1d6c5a454a19bf5572a742049976afa3cb4cefd875e1bda22f83af0bdb3701c8746a77a5b0d789fb754adfaa465f1b2c529de94e2bae2c5659e2714488726
SSDEEP 196608:jA50jxIjMlPpZN6WMDkFgUY8ChHAVM8P3xSgJ+IMp:jEI2MlRZ5fDTM8P3ggJ/Q
TLSH
T12E7601176581803EE2721A718C6F5E7446E12D2B7E32461FB584FFA82EF7D427923B06
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

0a:fd:95:a3:fb:d3:01:12:99:77:09:41:95:3d:75:c2:54:02:d2:e1:24:3f:10:a0:f2:65:46:85:25:ec:49:e9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=L51909TN1990PLC019007,CN=ODYSSEY TECHNOLOGIES LIMITED,OU=IT,O=ODYSSEY TECHNOLOGIES LIMITED,STREET=5TH FLOOR\, DOWLATH TOWERS\, 63\, TAYLORS KILPAUK,L=Chennai,ST=Tamil Nadu,C=IN,1.3.6.1.4.1.311.60.2.1.2=#130a54616d696c204e616475,1.3.6.1.4.1.311.60.2.1.3=#1302494e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Aug 13, 2026

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

Serial Number

45:a4:e5:61:0e:71:b2:99:df:0b:d4:ee

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 10, 2025 - Feb 10, 2027

Subject

CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE

Serial Number

84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4

Issuer

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 15, 2025 - Jan 10, 2037

Subject

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Serial Number

83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f

Issuer

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 16, 2025 - Jul 16, 2041

Subject

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 9, 2020 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

436923

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\CodeBases\isdev\src\Runtime\MSI\Shared\Setup\Setup___Win32_Release_Unicode\setup.pdb

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

comctl32

ord17

kernel32

SizeofResource LoadResource FindResourceW GlobalUnlock GlobalLock GlobalFree GetTickCount GetExitCodeThread CreateThread CopyFileW InterlockedIncrement GetVersionExW CompareStringA CompareStringW CreateEventW InterlockedDecrement QueryPerformanceFrequency lstrcatW GetTempFileNameW LoadLibraryW FreeLibrary GetProcAddress GetSystemDefaultLangID GetUserDefaultLangID lstrcmpW lstrcmpiW VerLanguageNameW FindClose FindNextFileW CompareFileTime FindFirstFileW MoveFileW GetPrivateProfileStringW CreateDirectoryW SetFileAttributesW GetSystemTimeAsFileTime LocalFree FormatMessageW GetSystemInfo MulDiv RaiseException InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection LoadLibraryExW GetModuleHandleW GetVersion GetLocalTime IsValidLocale GetFileAttributesW GetCommandLineW lstrcpyA VirtualQuery IsBadReadPtr FlushFileBuffers SetEndOfFile GetDriveTypeW GetLocaleInfoW GetCurrentThread GetDiskFreeSpaceW GetExitCodeProcess LocalAlloc GetModuleFileNameW GlobalAlloc SetStdHandle GetTimeZoneInformation GetConsoleMode GetConsoleCP LCMapStringA InitializeCriticalSectionAndSpinCount SetConsoleCtrlHandler SetThreadContext GetStringTypeA EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetStartupInfoA GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW HeapDestroy HeapCreate HeapReAlloc VirtualAlloc VirtualFree FatalAppExitA GetModuleHandleA LCMapStringW IsValidCodePage GetOEMCP GetACP GetCPInfo HeapSize GetCurrentThreadId TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleFileNameA GetStdHandle GetStartupInfoW IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlUnwind lstrcpynA lstrcmpA SearchPathW lstrlenW VirtualProtect SystemTimeToFileTime QueryPerformanceCounter SetEvent ResetEvent GetCurrentProcessId GetEnvironmentVariableW CreateToolhelp32Snapshot Process32FirstW Process32NextW GetDateFormatW GetTimeFormatW GetCurrentDirectoryW FindResourceExW OpenProcess GetProcessTimes LockResource ExpandEnvironmentStringsW GetTempPathW SetErrorMode GetWindowsDirectoryW lstrcpyW GetSystemDirectoryW SetCurrentDirectoryW CreateProcessW WaitForSingleObject DeleteFileW RemoveDirectoryW Sleep ExitProcess GetCurrentProcess DuplicateHandle TerminateProcess MoveFileExW GetThreadContext VirtualProtectEx WriteProcessMemory LoadLibraryA FlushInstructionCache lstrcpynW GetProcessHeap HeapAlloc HeapFree WriteFile ReadFile SetFilePointer MultiByteToWideChar WideCharToMultiByte CreateFileW GetFileSize CreateFileMappingW MapViewOfFile UnmapViewOfFile CloseHandle lstrlenA GetLastError SetLastError GetStringTypeW ResumeThread SetEnvironmentVariableA CreateFileA WriteConsoleW InterlockedExchange WriteConsoleA GetConsoleOutputCP

user32

ExitWindowsEx CharUpperW wvsprintfW SendDlgItemMessageW CharPrevW LoadImageW CreateDialogParamW MoveWindow SetCursor GetDlgItemTextW GetWindow SetFocus EnableWindow SetDlgItemTextW SetForegroundWindow SetActiveWindow GetDlgCtrlID FillRect GetSysColor GetSysColorBrush SendMessageW IsDialogMessageW GetWindowRect GetSystemMetrics SetRect FindWindowW IntersectRect SubtractRect IsWindow DestroyWindow CreateDialogIndirectParamW CharNextW MessageBoxW WaitForInputIdle GetWindowLongW SetWindowLongW GetClientRect ClientToScreen SetWindowPos GetWindowDC ReleaseDC EndPaint BeginPaint EndDialog SetWindowTextW GetDlgItem ShowWindow DialogBoxIndirectParamW GetDesktopWindow MsgWaitForMultipleObjects PeekMessageW wsprintfW LoadIconW LoadCursorW RegisterClassW CreateWindowExW GetMessageW TranslateMessage DispatchMessageW DefWindowProcW PostMessageW KillTimer PostQuitMessage SetTimer GetDC

gdi32

GetDIBColorTable GetSystemPaletteEntries CreatePalette CreateHalftonePalette UnrealizeObject SelectPalette RealizePalette CreateFontW SetBkMode SetTextColor GetObjectW GetDeviceCaps CreateFontIndirectW CreateSolidBrush CreateCompatibleDC SelectObject BitBlt CreateDIBitmap DeleteDC DeleteObject GetStockObject TranslateCharsetInfo

advapi32

RegEnumKeyW RegCreateKeyW LookupPrivilegeValueW OpenThreadToken OpenProcessToken GetTokenInformation AllocateAndInitializeSid EqualSid FreeSid InitializeSecurityDescriptor SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorDacl RegEnumKeyExW RegQueryInfoKeyW RegDeleteKeyW RegEnumValueW RegSetValueExW RegCreateKeyExW RegDeleteValueW RegQueryValueExW RegOpenKeyExW RegCloseKey AdjustTokenPrivileges RegOpenKeyW

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetMalloc SHGetSpecialFolderLocation ShellExecuteExW ShellExecuteW CommandLineToArgvW

ole32

CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CLSIDFromProgID CoInitialize CoCreateGuid CreateItemMoniker GetRunningObjectTable StringFromGUID2 ProgIDFromCLSID CoUninitialize CoInitializeSecurity CoCreateInstance

oleaut32

VariantClear VarBstrFromDate SysStringByteLen GetErrorInfo VarUI4FromStr SystemTimeToVariantTime CreateErrorInfo SysAllocStringByteLen SysAllocString LoadTypeLi RegisterTypeLi SetErrorInfo VariantChangeType SysFreeString SysAllocStringLen SysReAllocStringLen SysStringLen VarBstrCat

rpcrt4

UuidCreate RpcStringFreeW UuidFromStringW UuidToStringW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-16_f83665c073df3559c131c2f7c9ce7ef3_elex_stop

version

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

rpcrt4

generic