2026-10-02_3e00a86938f43260ced94c004788fc6c_elex_mafia

General

Target
2026-10-02_3e00a86938f43260ced94c004788fc6c_elex_mafia
Size 520KB
Sample261003-rfvxls1v4r
SHA256 42a210993ee46d9b1f03535f945f7fe777f3598c7b6e33f1b208a67aef1b7f9f
MD5 3e00a86938f43260ced94c004788fc6c
SHA1 4555a0a38c34894b1f56e29da24b0414dc1a529f
SHA512 085745f96924744b5414f6ea88e4d1cfc88c2b3cb3d04c9265a3840e2311af3f2a315558faf7d06738e919089e53466b0646fa5098ed0d0fc1ebb4624b7fa3b2
SSDEEP 12288:gj8fuxR21t5i8fAM2A0MJBmfTGzyiVHADkNZ6:gj8fuK1GYAM2A0MJBmfsyiVggNI
TLSH
T1D1B4F1227984C037E9D716308A55EBA20BBE7D355B2695C33B80366D6FB52D2D73830B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-02_3e00a86938f43260ced94c004788fc6c_elex_mafia

File Explorer

2026-10-02_3e00a86938f43260ced94c004788fc6c_elex_mafia

.exe 520KB

2026-10-02_3e00a86938f43260ced94c004788fc6c_elex_mafia

IMPHASH 6dca3e9fb3928bbdb54dbce669943ec8
SHA256 42a210993ee46d9b1f03535f945f7fe777f3598c7b6e33f1b208a67aef1b7f9f
MD5 3e00a86938f43260ced94c004788fc6c
SHA1 4555a0a38c34894b1f56e29da24b0414dc1a529f
SHA512 085745f96924744b5414f6ea88e4d1cfc88c2b3cb3d04c9265a3840e2311af3f2a315558faf7d06738e919089e53466b0646fa5098ed0d0fc1ebb4624b7fa3b2
SSDEEP 12288:gj8fuxR21t5i8fAM2A0MJBmfTGzyiVHADkNZ6:gj8fuK1GYAM2A0MJBmfsyiVggNI
TLSH
T1D1B4F1227984C037E9D716308A55EBA20BBE7D355B2695C33B80366D6FB52D2D73830B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetComputerNameW GetLocalTime SystemTimeToFileTime FileTimeToSystemTime SizeofResource LockResource LoadResource FindResourceW FindResourceExW MultiByteToWideChar GetProcAddress LoadLibraryW GetCurrentProcess LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetLastError CloseHandle WideCharToMultiByte MoveFileW DeleteFileW CreateDirectoryW SetFileAttributesW GetTempPathW GetTempFileNameW MoveFileExW lstrlenW CreateFileW GetFileSize ReadFile WriteFile Sleep GetComputerNameA GetModuleFileNameW CreateProcessW GetSystemTime FileTimeToLocalFileTime RaiseException InitializeCriticalSectionAndSpinCount HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap LocalAlloc SetEndOfFile SetStdHandle WriteConsoleW FreeLibrary LoadLibraryA InterlockedIncrement InterlockedDecrement InterlockedExchange EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW GetCurrentThreadId RtlUnwind LCMapStringW GetCPInfo SetUnhandledExceptionFilter ExitProcess GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetConsoleCP GetConsoleMode GetACP GetOEMCP IsValidCodePage SetFilePointer FlushFileBuffers GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW

ole32

CoCreateInstance CoInitialize

shlwapi

PathIsRootW PathFileExistsW PathAppendW PathAddExtensionW PathRemoveExtensionW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-02_3e00a86938f43260ced94c004788fc6c_elex_mafia

kernel32

ole32

shlwapi

generic