General
- Target 2026-09-29_13ed06de80a11a2dfe5454ff19bb5ac4_elex_stealc_stop_swisyn
- Size 405KB
- Sample260930-fym4yafe49
- SHA256 c8497306e696ad5fdece5a5186d91aea1c98339d9fc4afe5f020e7fb123e8de4
- MD5 13ed06de80a11a2dfe5454ff19bb5ac4
- SHA1 723462a4712ec54640060e448c3c0356a17e1c7c
- SHA512 53f80594ad8416978b7d472f5f3e8eb887f44d54e41795e12688faf6c6994c655dd14df781eefdffa79c30f3f65fb87fa5c428ef75ce4d1026510c5b3640b815
- SSDEEP 6144:UsLqdufVUNDav3EG5fRLCv/LnDNhqVAEQBz:PFUNDav0T/LnZAVA5l
- TLSH T1B0946D227B60C436C46254B61869D779BAB9BD310FA09EC777D02B2D9E711C3BA7430B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_13ed06de80a11a2dfe5454ff19bb5ac4_elex_stealc_stop_swisyn.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_13ed06de80a11a2dfe5454ff19bb5ac4_elex_stealc_stop_swisyn.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_13ed06de80a11a2dfe5454ff19bb5ac4_elex_stealc_stop_swisyn
- Size 405KB
- SHA256 c8497306e696ad5fdece5a5186d91aea1c98339d9fc4afe5f020e7fb123e8de4
- MD5 13ed06de80a11a2dfe5454ff19bb5ac4
- SHA1 723462a4712ec54640060e448c3c0356a17e1c7c
- SHA512 53f80594ad8416978b7d472f5f3e8eb887f44d54e41795e12688faf6c6994c655dd14df781eefdffa79c30f3f65fb87fa5c428ef75ce4d1026510c5b3640b815
- SSDEEP 6144:UsLqdufVUNDav3EG5fRLCv/LnDNhqVAEQBz:PFUNDav0T/LnZAVA5l
- TLSH T1B0946D227B60C436C46254B61869D779BAB9BD310FA09EC777D02B2D9E711C3BA7430B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2