2026-10-04_efeffa37a61688196c6d7c358cfac35d_elex_floxif_maze

General

Target
2026-10-04_efeffa37a61688196c6d7c358cfac35d_elex_floxif_maze
Size 322KB
Sample261004-2edl2ssv5k
SHA256 a61c363c148c76f1f43a523ad28f94abc66450bdd461eed68b7e99c039653716
MD5 efeffa37a61688196c6d7c358cfac35d
SHA1 5d66cdac138ab0a8808ead0a730fb8a25b98a730
SHA512 019bc3327abb0cedc1fc967ac20626d59cc98e77a1fb9bd525622a55fb5a0444b5dfcef3c81eb425683d06c4ad5a51c124efa22d595a082695be5d073d154199
SSDEEP 6144:LEq7CXk28zZBlWEp3zpB7jHCDO3jV27BV+UdvrEFp7hKwu:9CCWyzpB7jHCDO3527BjvrEH7Xu
TLSH
T18264AE82B79087F5E6802179329A5B774CB2EA2D1B2D81D3E3910D646F2D5F0B97C34E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-04_efeffa37a61688196c6d7c358cfac35d_elex_floxif_maze

File Explorer

2026-10-04_efeffa37a61688196c6d7c358cfac35d_elex_floxif_maze

.exe 322KB

2026-10-04_efeffa37a61688196c6d7c358cfac35d_elex_floxif_maze

IMPHASH d3a9707764c4f39c180aea84c7e4eb94
SHA256 a61c363c148c76f1f43a523ad28f94abc66450bdd461eed68b7e99c039653716
MD5 efeffa37a61688196c6d7c358cfac35d
SHA1 5d66cdac138ab0a8808ead0a730fb8a25b98a730
SHA512 019bc3327abb0cedc1fc967ac20626d59cc98e77a1fb9bd525622a55fb5a0444b5dfcef3c81eb425683d06c4ad5a51c124efa22d595a082695be5d073d154199
SSDEEP 6144:LEq7CXk28zZBlWEp3zpB7jHCDO3jV27BV+UdvrEFp7hKwu:9CCWyzpB7jHCDO3527BjvrEH7Xu
TLSH
T18264AE82B79087F5E6802179329A5B774CB2EA2D1B2D81D3E3910D646F2D5F0B97C34E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

207467

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

gethostname __WSAFDIsSet recvfrom sendto getaddrinfo freeaddrinfo WSASetLastError getpeername getsockopt ntohs getsockname inet_addr WSAGetLastError WSACleanup WSAStartup socket setsockopt send select recv listen htons htonl ioctlsocket connect closesocket bind accept

wldap32

ord22 ord211 ord143 ord60 ord50 ord26 ord30 ord32 ord35 ord79 ord200 ord33 ord301 ord27 ord41 ord46

kernel32

DecodePointer GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter EncodePointer IsProcessorFeaturePresent IsDebuggerPresent WaitForSingleObject FormatMessageA ExpandEnvironmentStringsA Sleep LoadLibraryA FreeLibrary GetFileType WaitForMultipleObjects PeekNamedPipe ReadFile EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection SetLastError GetLastError SleepEx SetConsoleTitleA GetTickCount SetConsoleCtrlHandler SetConsoleTextAttribute GetStdHandle GetProcAddress CloseHandle

msvcr120

_strdup isgraph isprint isupper islower _stat64 _close _fileno _open _read _strnicmp _except_handler4_common _crt_debugger_hook __crtUnhandledException __crtTerminateProcess _XcptFilter _amsg_exit __getmainargs __set_app_type _cexit _configthreadlocale __setusermatherr _initterm_e _initterm __initenv _fmode _commode ?terminate@@YAXXZ __crtSetUnhandledExceptionFilter _lock _unlock _calloc_crt __dllonexit _onexit _invoke_watson _controlfp_s _mkdir sprintf _stricmp memcpy memset printf puts srand _sleep _localtime64 _time64 __iob_func fclose fopen fprintf exit _exit calloc free malloc realloc fgets sscanf memmove strtok fgetc fread fseek fwrite setvbuf rand ftell getchar atoi feof fputs strchr strtoul strstr tolower strtol isxdigit strncpy strrchr _strtoi64 strncmp qsort isdigit fputc _errno isalnum isspace memchr _fstat64 _lseeki64 fflush getenv strerror __sys_nerr _gmtime64 isalpha _beginthreadex

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-04_efeffa37a61688196c6d7c358cfac35d_elex_floxif_maze

ws2_32

wldap32

kernel32

msvcr120

generic