2026-09-29_b645927ed06ce37193bd7107a4d74a56_elex_magniber_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-29_b645927ed06ce37193bd7107a4d74a56_elex_magniber_stop
Size 3.8MB
Sample260930-vrtepstfmd
SHA256 341c5f0b3bda8e4e774e12c247524b79e496b95536f6a94dcafb8445363b109e
MD5 b645927ed06ce37193bd7107a4d74a56
SHA1 ad1ac5f34e26d8440de890b711c8b00de53969b1
SHA512 c3cb3523710dd468991b34bce39b57557a7ae15bbc5a4091a27a55ec9c7bd59f791e90404beffa555078e90ded6917d7ea7fc3913044ddb2d4a46a07ea8f46b9
SSDEEP 98304:K9U7XzcwxOzoUocaLFCZUhna9DMM/EVL5Ss0gYZ:R7ozo/Qe9a9DMMsnYZ
TLSH
T12E06CF30A640C537F9F302B0D939526E55692E725F24E0DBA3CCBD8E1A719E3A632717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-09-29_b645927ed06ce37193bd7107a4d74a56_elex_magniber_stop

File Explorer

2026-09-29_b645927ed06ce37193bd7107a4d74a56_elex_magniber_stop

.exe 3.8MB

2026-09-29_b645927ed06ce37193bd7107a4d74a56_elex_magniber_stop

IMPHASH 01ac365d486bb0d66ebf1639ecb4076e
SHA256 341c5f0b3bda8e4e774e12c247524b79e496b95536f6a94dcafb8445363b109e
MD5 b645927ed06ce37193bd7107a4d74a56
SHA1 ad1ac5f34e26d8440de890b711c8b00de53969b1
SHA512 c3cb3523710dd468991b34bce39b57557a7ae15bbc5a4091a27a55ec9c7bd59f791e90404beffa555078e90ded6917d7ea7fc3913044ddb2d4a46a07ea8f46b9
SSDEEP 98304:K9U7XzcwxOzoUocaLFCZUhna9DMM/EVL5Ss0gYZ:R7ozo/Qe9a9DMMsnYZ
TLSH
T12E06CF30A640C537F9F302B0D939526E55692E725F24E0DBA3CCBD8E1A719E3A632717
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

d9:b1:3b:f1:0d:ec:c2:2e:e0:bd:58:de:ae:d7:81:cb:95:0d:9b:d8

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=BFG Entertainment Inc.,O=BFG Entertainment Inc.,L=Coral Gables,ST=Florida,C=US

Chains

Sep 16, 2026

CN=BFG Entertainment Inc.,O=BFG Entertainment Inc.,L=Coral Gables,ST=Florida,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=BFG Entertainment Inc.,O=BFG Entertainment Inc.,L=Coral Gables,ST=Florida,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Subject

CN=BFG Entertainment Inc.,O=BFG Entertainment Inc.,L=Coral Gables,ST=Florida,C=US

Serial Number

05:ca:2f:49:c1:69:59:5e:c9:0f:50:9c:88:9a:51:a6

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 6, 2025 - Dec 5, 2028

Minor OS version

Major OS version

Entry point

2383650

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError CloseHandle CreateMutexA ContinueDebugEvent ResumeThread OutputDebugStringA OutputDebugStringW SetThreadContext GetThreadContext WaitForDebugEvent WriteProcessMemory UnmapViewOfFile InitializeCriticalSection FreeConsole CreateThread SuspendThread DebugActiveProcess SetEnvironmentVariableA GetCurrentProcessId MapViewOfFile DuplicateHandle GetCurrentProcess CreateFileMappingA GetVersionExA GetProcAddress LoadLibraryA GetCommandLineW GetEnvironmentVariableA VirtualProtect VirtualAlloc SetLastError ReleaseMutex WaitForSingleObject OpenMutexA SetErrorMode GetShortPathNameA GetModuleFileNameA GetShortPathNameW GetModuleFileNameW GlobalUnlock GlobalLock GlobalAlloc WideCharToMultiByte IsBadReadPtr GlobalAddAtomA GlobalAddAtomW GlobalFree GlobalGetAtomNameA GlobalDeleteAtom GlobalGetAtomNameW MultiByteToWideChar SearchPathA GetTempPathA GetTempPathW GetTempFileNameA GetTempFileNameW GetWindowsDirectoryA CreateFileA GetPrivateProfileStringA WritePrivateProfileStringA DeleteFileA MoveFileA CreateProcessA VirtualProtectEx GetCommandLineA SetEvent CreateEventA GetSystemTimeAsFileTime ExitProcess GetLocalTime GetCurrentThreadId ReadFile GetFileSize CompareStringA SetEndOfFile FlushFileBuffers WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetConsoleMode GetConsoleCP SetFilePointer GetLocaleInfoW IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetTimeZoneInformation HeapSize FreeLibrary SetConsoleCtrlHandler QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA HeapReAlloc FatalAppExitA VirtualFree HeapCreate HeapDestroy GetStdHandle WriteFile TlsFree TlsSetValue TlsAlloc TlsGetValue IsValidCodePage CompareStringW GetOEMCP GetACP GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetCPInfo GetDateFormatA GetTimeFormatA GetProcessHeap HeapAlloc HeapFree IsDebuggerPresent SetUnhandledExceptionFilter EnterCriticalSection ReadProcessMemory LeaveCriticalSection GetExitCodeProcess GetCurrentThread SetThreadPriority Sleep GetTickCount VirtualQueryEx GetStartupInfoA GetModuleHandleA UnhandledExceptionFilter TerminateProcess RaiseException InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange DeleteCriticalSection GetFileAttributesA GetFileAttributesW GetFileAttributesExW CreateFileW GetCurrentDirectoryW SetCurrentDirectoryW GetFileAttributesExA GetCurrentDirectoryA SetCurrentDirectoryA FindClose GetFileTime SetFileTime GetDiskFreeSpaceExW GetFullPathNameW RemoveDirectoryW DeleteFileW CreateDirectoryW CreateHardLinkW GetDiskFreeSpaceExA GetFullPathNameA RemoveDirectoryA CreateDirectoryA CreateHardLinkA MoveFileW CopyFileW CopyFileA GetFileInformationByHandle FindFirstFileW FindNextFileW FindFirstFileA FindNextFileA LocalFree FormatMessageA RtlUnwind

user32

CreateWindowExA MessageBoxA DispatchMessageA BeginPaint EndPaint KillTimer GetAsyncKeyState DefDlgProcA DrawTextA CreateDialogParamA RegisterClassExA DialogBoxParamA GetWindowTextLengthA GetWindowTextA SetWindowTextA GetDlgItem ShowWindow UpdateWindow InSendMessage UnpackDDElParam FreeDDElParam DefWindowProcW DefWindowProcA LoadCursorA RegisterClassW CreateWindowExW RegisterClassA CreateDialogIndirectParamA GetWindowThreadProcessId SendMessageW PeekMessageA EnumWindows IsWindowUnicode PackDDElParam PostMessageW PostMessageA IsWindow LoadStringA LoadStringW FindWindowA DestroyWindow GetDesktopWindow GetSystemMetrics MoveWindow SendMessageA SetPropA EnumThreadWindows GetPropA WaitForInputIdle SetTimer GetMessageA TranslateMessage

gdi32

SelectObject BitBlt DeleteObject CreatePalette CreateDCA SelectPalette RealizePalette CreateDIBitmap DeleteDC CreateCompatibleDC

comdlg32

GetSaveFileNameA GetOpenFileNameA

Name

.text

Size

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

157KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

Virtual Size

312KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text1

Size

703KB

Virtual Size

704KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

52KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data2

Size

116KB

Virtual Size

128KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc1

Size

36KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.pdata

Size

2.6MB

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

312KB

Virtual Size

312KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_b645927ed06ce37193bd7107a4d74a56_elex_magniber_stop

PE Signature issue

kernel32

user32

gdi32

comdlg32

generic