2026-09-29_ba33ad84e7df0b1312a54a53c5039eab_elex_mafia

General

Target
2026-09-29_ba33ad84e7df0b1312a54a53c5039eab_elex_mafia
Size 2.3MB
Sample260930-vmsbvayzds
SHA256 ebb851ae3efb16b6d2d943a8246f553742316b365b18df4efc97e647dcc45aba
MD5 ba33ad84e7df0b1312a54a53c5039eab
SHA1 45ca9ca20033803da80a760ec8f940defe9d06c5
SHA512 975b3e07a46b1cd39f3635cb521051df493610ff9c8b6ebb62c633eea4b045bdde1c7e7ab2bf4b6cd7bab71613e91c9fb4268bb1ba7c4ff900e24364f2abec5c
SSDEEP 49152:wh0YlG5SnFpTnYu6E24hhu8AxORXHLG6+vMR48AxORXZq:wh4wnZxzutOx6DvMR4tOfq
TLSH
T140B5BF4AA67941F5E8779130CAA26237E9753C5E033093EB93E47A2A3B733F05639345
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_ba33ad84e7df0b1312a54a53c5039eab_elex_mafia

File Explorer

2026-09-29_ba33ad84e7df0b1312a54a53c5039eab_elex_mafia

.exe 2.3MB

2026-09-29_ba33ad84e7df0b1312a54a53c5039eab_elex_mafia

IMPHASH 79da793e7375f869414eb65ac17f125a
SHA256 ebb851ae3efb16b6d2d943a8246f553742316b365b18df4efc97e647dcc45aba
MD5 ba33ad84e7df0b1312a54a53c5039eab
SHA1 45ca9ca20033803da80a760ec8f940defe9d06c5
SHA512 975b3e07a46b1cd39f3635cb521051df493610ff9c8b6ebb62c633eea4b045bdde1c7e7ab2bf4b6cd7bab71613e91c9fb4268bb1ba7c4ff900e24364f2abec5c
SSDEEP 49152:wh0YlG5SnFpTnYu6E24hhu8AxORXHLG6+vMR48AxORXZq:wh4wnZxzutOx6DvMR4tOfq
TLSH
T140B5BF4AA67941F5E8779130CAA26237E9753C5E033093EB93E47A2A3B733F05639345
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

245852

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dev\prj\cryptomix\VeraCrypt\src\Setup\Release\VeraCryptSetup.pdb

kernel32

LeaveCriticalSection GetLastError InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetProcAddress GetModuleHandleW lstrcmpiW LocalFree LocalAlloc FormatMessageW FreeLibrary MultiByteToWideChar SizeofResource LoadResource FindResourceW LoadLibraryExW GetModuleFileNameW MoveFileExW DeleteFileW CloseHandle GetCurrentProcess DeviceIoControl Sleep GetSystemDirectoryW CreateFileW HeapFree HeapAlloc GetProcessHeap FindClose FindNextFileW FindFirstFileW CopyFileW SetCurrentDirectoryW GetWindowsDirectoryW LoadLibraryW GetTempPathW CreateProcessW DefineDosDeviceW GetFirmwareEnvironmentVariableW SetLastError ReadFile SetFilePointerEx EnterCriticalSection SetFirmwareEnvironmentVariableW CreateDirectoryW GetShortPathNameW GetVolumeInformationW GetVolumePathNameW WriteFile FindVolumeClose FindNextVolumeW QueryDosDeviceW FindFirstVolumeW GetDriveTypeW InitializeCriticalSection UnhandledExceptionFilter WaitForSingleObject GetCurrentThread GetCurrentThreadId SetUnhandledExceptionFilter ReleaseMutex CreateMutexW GetVersionExW SetFileTime GetFileTime FlushFileBuffers GetFileSize LockResource GetFileAttributesW WideCharToMultiByte GetLogicalDrives GetCurrentProcessId GetCurrentDirectoryW RemoveDirectoryW SetErrorMode VirtualLock SetFilePointer GetTickCount GetFileType RaiseException GetFileSizeEx lstrlenW InterlockedExchange LoadLibraryA InterlockedIncrement InterlockedDecrement GetStringTypeW InterlockedCompareExchange EncodePointer DecodePointer RtlUnwind FileTimeToSystemTime FileTimeToLocalFileTime FindFirstFileExW ExitThread ResumeThread CreateThread ExitProcess MoveFileW GetSystemTimeAsFileTime SetStdHandle IsDebuggerPresent TerminateProcess GetCommandLineW HeapSetInformation GetStartupInfoW HeapReAlloc LCMapStringW GetCPInfo GetStdHandle HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree HeapSize IsProcessorFeaturePresent GetFullPathNameW GetFileInformationByHandle PeekNamedPipe GetLocaleInfoW GetACP GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode SetHandleCount FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTimeZoneInformation GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetEndOfFile WriteConsoleW CompareStringW SetEnvironmentVariableA

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_ba33ad84e7df0b1312a54a53c5039eab_elex_mafia

kernel32

generic