2026-09-29_5ca93324f9aa9e5dff190251029367e7_elex_maze

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-29_5ca93324f9aa9e5dff190251029367e7_elex_maze
Size 1.8MB
Sample260930-agmtyssbpc
SHA256 30083e8393627bbb465463124b13f5447c67298930e82e24003e0271c6b2c22b
MD5 5ca93324f9aa9e5dff190251029367e7
SHA1 1f4504bf844afcf9ea314b762acc14eaaa4fc278
SHA512 7601134e0f070023e907c2c8ab37c4ff4abf59b5513edfb7969903cb8278ad7203ce637611d6ad7333b05ad7cd26cd0879571ffa3602d80894567b1c1b4ae3a9
SSDEEP 24576:+kv9hGJZBXsO0//3h9dCN/j2GLl3iFSE33b9kaKngL2jdshRTdG1YxITqvfPkbIp:Wl0n3hSN/j2U4FHkarSj8RoTCCW
TLSH
T14A95F11266A1C038E36203B54ABAFA64182C7E74475591DFF7D43E7D0E34AD36B3722A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_5ca93324f9aa9e5dff190251029367e7_elex_maze

File Explorer

2026-09-29_5ca93324f9aa9e5dff190251029367e7_elex_maze

.exe 1.8MB

2026-09-29_5ca93324f9aa9e5dff190251029367e7_elex_maze

IMPHASH 4689aed6c48fc18dffc54fca7695e202
SHA256 30083e8393627bbb465463124b13f5447c67298930e82e24003e0271c6b2c22b
MD5 5ca93324f9aa9e5dff190251029367e7
SHA1 1f4504bf844afcf9ea314b762acc14eaaa4fc278
SHA512 7601134e0f070023e907c2c8ab37c4ff4abf59b5513edfb7969903cb8278ad7203ce637611d6ad7333b05ad7cd26cd0879571ffa3602d80894567b1c1b4ae3a9
SSDEEP 24576:+kv9hGJZBXsO0//3h9dCN/j2GLl3iFSE33b9kaKngL2jdshRTdG1YxITqvfPkbIp:Wl0n3hSN/j2U4FHkarSj8RoTCCW
TLSH
T14A95F11266A1C038E36203B54ABAFA64182C7E74475591DFF7D43E7D0E34AD36B3722A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

246328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\rdm\projects\17484\pdb\Release\qbclient.pdb

qbcore

cef_log cef_stream_writer_create_for_handler cef_drag_data_create cef_stream_reader_create_for_file cef_browser_host_create_browser cef_v8value_create_string cef_v8value_create_object cef_v8value_create_function cef_string_list_size cef_string_list_value cef_string_list_append cef_string_map_size cef_string_map_key cef_string_map_value cef_string_map_append cef_string_multimap_size cef_string_multimap_key cef_string_multimap_value cef_string_multimap_append cef_string_multimap_alloc cef_string_multimap_free cef_string_list_copy cef_get_extensions_for_mime_type cef_quit_message_loop cef_run_message_loop cef_shutdown cef_initialize cef_execute_process cef_post_delayed_task cef_post_task cef_currently_on cef_cookie_manager_get_global_manager cef_process_message_create cef_command_line_get_global cef_command_line_create cef_string_map_free cef_string_map_alloc cef_string_list_free cef_string_list_alloc cef_string_userfree_utf16_free cef_api_hash cef_string_ascii_to_utf16 cef_string_wide_to_utf8 cef_string_utf16_cmp cef_string_utf16_to_utf8 cef_string_utf8_clear cef_string_utf8_to_utf16 cef_string_utf16_clear cef_string_utf16_set

opengl32

glPopMatrix glPushAttrib glPushMatrix glRotatef glTexEnvf glTexImage2D glTexParameteri glTexSubImage2D glVertex2f glVertex2i glViewport glPopAttrib glMatrixMode glLoadIdentity glLineWidth glInterleavedArrays glHint glGenTextures glEnd glEnable glDrawArrays glDisable glDeleteTextures glColor4f glPixelStorei wglDeleteContext glColor3f glClearColor glClear glBlendFunc glBindTexture glBegin wglMakeCurrent glOrtho wglCreateContext

gdiplus

GdiplusShutdown GdiplusStartup

kernel32

VirtualQuery VirtualFree FlushInstructionCache VirtualAlloc VirtualProtect IsProcessorFeaturePresent RtlUnwind GetCPInfo UnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW GetStdHandle WriteFile IsValidCodePage GetACP GetOEMCP GetFileType QueryPerformanceCounter RtlCaptureContext SearchPathW IsDebuggerPresent CloseHandle DuplicateHandle SetUnhandledExceptionFilter CreateEventW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId ResumeThread CreateProcessW GetThreadContext OpenProcess GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress WaitForMultipleObjects SetThreadContext LocalFree DecodePointer RaiseException GetLastError HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap InitializeCriticalSectionAndSpinCount DeleteCriticalSection Sleep TerminateProcess CreateThread GlobalFree LoadLibraryW MultiByteToWideChar WideCharToMultiByte GetCommandLineW GetFileAttributesW OutputDebugStringA SetEvent WaitForSingleObject GetModuleFileNameA GetTempPathA CreateFileMappingW MapViewOfFile UnmapViewOfFile lstrcpynW lstrcatW lstrlenW GlobalAlloc GlobalSize GlobalLock GlobalUnlock FreeLibrary SetEnvironmentVariableW GetFileAttributesA GetWindowsDirectoryW GetPrivateProfileStringW GetTickCount GetPrivateProfileIntW SetLastError SetErrorMode EnterCriticalSection LeaveCriticalSection GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW LoadLibraryExW GetStringTypeW GetConsoleCP GetConsoleMode SetFilePointerEx OutputDebugStringW EncodePointer SetStdHandle WriteConsoleW FlushFileBuffers CreateFileW

user32

IsChild DestroyWindow IsWindowVisible DispatchMessageW TranslateMessage GetMessageW PostMessageW SetFocus CreateWindowExW RegisterClassExW GetDoubleClickTime SetPropA GetWindowLongW SetWindowLongW SetParent TrackMouseEvent RegisterClipboardFormatW GetAncestor LoadIconW LoadCursorW GetWindowThreadProcessId GetParent SetClassLongW PtInRect WindowFromPoint SetWindowPos IsWindow PostMessageA RegisterWindowMessageW ScreenToClient ClientToScreen GetCursorPos SetCursor GetWindowRect GetClientRect GetPropA SetPropW EndPaint BeginPaint ReleaseDC GetDC GetSystemMetrics ReleaseCapture SetCapture GetCapture GetKeyState GetMessageTime DefWindowProcW

gdi32

GetDeviceCaps SwapBuffers ChoosePixelFormat SetPixelFormat

comdlg32

GetOpenFileNameW

advapi32

RegOpenKeyW RegQueryValueExW RegOpenKeyExW RegCloseKey

shell32

DragQueryFileW CommandLineToArgvW SHGetFolderPathW ShellExecuteW DragFinish

ole32

OleUninitialize OleInitialize ReleaseStgMedium CoTaskMemFree CoTaskMemAlloc RevokeDragDrop RegisterDragDrop DoDragDrop

oleaut32

SysAllocString

shlwapi

PathAppendA PathRemoveFileSpecA PathRemoveFileSpecW PathFileExistsW PathAppendW

ws2_32

closesocket bind WSACleanup WSAStartup socket htons

winhttp

WinHttpGetIEProxyConfigForCurrentUser

Name

.text

Size

320KB

Virtual Size

319KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

115KB

Virtual Size

114KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.shared_

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

49KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_5ca93324f9aa9e5dff190251029367e7_elex_maze

qbcore

opengl32

gdiplus

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

ws2_32

winhttp

generic