2026-10-08_349c5d07f2a3a46412e4b7036b7b4cca_elex_mafia

General

Target
2026-10-08_349c5d07f2a3a46412e4b7036b7b4cca_elex_mafia
Size 518KB
Sample261009-v249yscs8v
SHA256 2971d3391bb88dd34b52c3b7f64c4866f71b4f331d5b609de45c0cbee7883036
MD5 349c5d07f2a3a46412e4b7036b7b4cca
SHA1 f614c8dbf077a3084e55e6e949616688790a23e7
SHA512 907b4e64fd1e712c223cfa6d9197405ac1fcfefff27fab464a8203cd83c3df54358b8bf862987be58164b6e13311ba67e4bd7c9bdfcd28c46fa3d29f61092681
SSDEEP 12288:anTpha1Jvu4WezQRZch5Y3Xi4GnSiWMNZ:any1E4J8RP3OnSAN
TLSH
T17BB4F111B986C032F59302398A36DBA2497E7C759726A5C73BC4327E6FB52D0E678307
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-08_349c5d07f2a3a46412e4b7036b7b4cca_elex_mafia

File Explorer

2026-10-08_349c5d07f2a3a46412e4b7036b7b4cca_elex_mafia

.exe 518KB

2026-10-08_349c5d07f2a3a46412e4b7036b7b4cca_elex_mafia

IMPHASH 6dca3e9fb3928bbdb54dbce669943ec8
SHA256 2971d3391bb88dd34b52c3b7f64c4866f71b4f331d5b609de45c0cbee7883036
MD5 349c5d07f2a3a46412e4b7036b7b4cca
SHA1 f614c8dbf077a3084e55e6e949616688790a23e7
SHA512 907b4e64fd1e712c223cfa6d9197405ac1fcfefff27fab464a8203cd83c3df54358b8bf862987be58164b6e13311ba67e4bd7c9bdfcd28c46fa3d29f61092681
SSDEEP 12288:anTpha1Jvu4WezQRZch5Y3Xi4GnSiWMNZ:any1E4J8RP3OnSAN
TLSH
T17BB4F111B986C032F59302398A36DBA2497E7C759726A5C73BC4327E6FB52D0E678307
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetComputerNameW GetLocalTime SystemTimeToFileTime FileTimeToSystemTime SizeofResource LockResource LoadResource FindResourceW FindResourceExW MultiByteToWideChar GetProcAddress LoadLibraryW GetCurrentProcess LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetLastError CloseHandle WideCharToMultiByte MoveFileW DeleteFileW CreateDirectoryW SetFileAttributesW GetTempPathW GetTempFileNameW MoveFileExW lstrlenW CreateFileW GetFileSize ReadFile WriteFile Sleep GetComputerNameA GetModuleFileNameW CreateProcessW GetSystemTime FileTimeToLocalFileTime RaiseException InitializeCriticalSectionAndSpinCount HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap LocalAlloc SetEndOfFile SetStdHandle WriteConsoleW FreeLibrary LoadLibraryA InterlockedIncrement InterlockedDecrement InterlockedExchange EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW GetCurrentThreadId RtlUnwind LCMapStringW GetCPInfo SetUnhandledExceptionFilter ExitProcess GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetConsoleCP GetConsoleMode GetACP GetOEMCP IsValidCodePage SetFilePointer FlushFileBuffers GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW

ole32

CoCreateInstance CoInitialize

shlwapi

PathIsRootW PathFileExistsW PathAppendW PathAddExtensionW PathRemoveExtensionW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-08_349c5d07f2a3a46412e4b7036b7b4cca_elex_mafia

kernel32

ole32

shlwapi

generic