General
- Target 2026-09-16_af7433de38d4263b8dc389099f0e0c13_elex_stop
- Size 791KB
- Sample260916-wpthcsstc1
- SHA256 d2ee6c424bf11c946e3d86f24fbaf1b92f7f0a87ce74fc31eea56991089159be
- MD5 af7433de38d4263b8dc389099f0e0c13
- SHA1 c55d67d4fd13b6d5a4ef21da791a1d5041356f08
- SHA512 a3129542a7b7fcb2097f15744a094b08769d8be218f20561041e0eddd63c9a723b7fef5c75f0554d6808e68a9253ed9b39728a8e1e0287246bc0b82485ee9fae
- SSDEEP 6144:3pqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnCm:3pqiC/2OGAtkCP4cejGSOpRK3CnIiG
- TLSH T1B4058E0273D680F1D85238711567E26A9B797D154726CE9BEBE03E339D311B0AF2A372
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-16_af7433de38d4263b8dc389099f0e0c13_elex_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_af7433de38d4263b8dc389099f0e0c13_elex_stop
- Size 791KB
- SHA256 d2ee6c424bf11c946e3d86f24fbaf1b92f7f0a87ce74fc31eea56991089159be
- MD5 af7433de38d4263b8dc389099f0e0c13
- SHA1 c55d67d4fd13b6d5a4ef21da791a1d5041356f08
- SHA512 a3129542a7b7fcb2097f15744a094b08769d8be218f20561041e0eddd63c9a723b7fef5c75f0554d6808e68a9253ed9b39728a8e1e0287246bc0b82485ee9fae
- SSDEEP 6144:3pqoa8aLiC/2OLSAN7gNVpNleQUohBfGPOtQciXeL/XYqGlebojSP2pjNhcAYnCm:3pqiC/2OGAtkCP4cejGSOpRK3CnIiG
- TLSH T1B4058E0273D680F1D85238711567E26A9B797D154726CE9BEBE03E339D311B0AF2A372
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Adds Run key to start application
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1