General
- Target 2026-09-29_01f567a10f0296afa92ccede4e949e63_elex_stealc_stop_swisyn
- Size 405KB
- Sample260930-gwtpdagc53
- SHA256 eeee9cd062ae43447e290a38a203bc84e4f68959ea0323e4bac38ea238411094
- MD5 01f567a10f0296afa92ccede4e949e63
- SHA1 bbca3320dbe976e267d3c5e384029c7f0edace9f
- SHA512 1662063117af226b7f783999d82deb5cc4d2eb9f906f632ec43e40dde8b6de66d444d61ac2443dc0260b4ca1495fdc70a301de3cedf2fda35e2b41783c1a5b3b
- SSDEEP 12288:PFUNDaRXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX9:PFOaRXXXXXXXXXXXXXXXXXXXXXXXXXX9
- TLSH T1E6948C137BA0C47BC52214B61869D779BA766E311F619DC373902B3D9E312C3BAB420B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_01f567a10f0296afa92ccede4e949e63_elex_stealc_stop_swisyn.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_01f567a10f0296afa92ccede4e949e63_elex_stealc_stop_swisyn.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_01f567a10f0296afa92ccede4e949e63_elex_stealc_stop_swisyn
- Size 405KB
- SHA256 eeee9cd062ae43447e290a38a203bc84e4f68959ea0323e4bac38ea238411094
- MD5 01f567a10f0296afa92ccede4e949e63
- SHA1 bbca3320dbe976e267d3c5e384029c7f0edace9f
- SHA512 1662063117af226b7f783999d82deb5cc4d2eb9f906f632ec43e40dde8b6de66d444d61ac2443dc0260b4ca1495fdc70a301de3cedf2fda35e2b41783c1a5b3b
- SSDEEP 12288:PFUNDaRXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX9:PFOaRXXXXXXXXXXXXXXXXXXXXXXXXXX9
- TLSH T1E6948C137BA0C47BC52214B61869D779BA766E311F619DC373902B3D9E312C3BAB420B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2