2026-10-10_0537824f130e6f501f19830e5f39cfe6_elex_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-10_0537824f130e6f501f19830e5f39cfe6_elex_stop
Size 5.2MB
Sample261011-2d82kaab65
SHA256 214d87efd3c10b8d4dd145942d641033b9b0a5cff37e9e95b679b8ae3ccddb4a
MD5 0537824f130e6f501f19830e5f39cfe6
SHA1 7847afbbc4bb18a7bf8743d91e6045b4fb26e561
SHA512 60b994d810f71b50f5373d954fe88e5a5627866f925a1380f846acdb181ec94b427a3647bb9b209fc596d1954db68e3592fde68ebd65d6154486ad24010d6a79
SSDEEP 98304:R1fZpn+8vcAA0UzZPQLgYGYOutY2PND5o3+HuVOJ:Pfrc6ONT6OmpP0uOVOJ
TLSH
T13E46F1432BE640B9D68F65B511B3AB1FF772A625071280F7D7D03DC1AA217C26A347E2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-10_0537824f130e6f501f19830e5f39cfe6_elex_stop

File Explorer

2026-10-10_0537824f130e6f501f19830e5f39cfe6_elex_stop

.exe 5.2MB

2026-10-10_0537824f130e6f501f19830e5f39cfe6_elex_stop

IMPHASH 78ea46403069cc2cd25c38a6976157e3
SHA256 214d87efd3c10b8d4dd145942d641033b9b0a5cff37e9e95b679b8ae3ccddb4a
MD5 0537824f130e6f501f19830e5f39cfe6
SHA1 7847afbbc4bb18a7bf8743d91e6045b4fb26e561
SHA512 60b994d810f71b50f5373d954fe88e5a5627866f925a1380f846acdb181ec94b427a3647bb9b209fc596d1954db68e3592fde68ebd65d6154486ad24010d6a79
SSDEEP 98304:R1fZpn+8vcAA0UzZPQLgYGYOutY2PND5o3+HuVOJ:Pfrc6ONT6OmpP0uOVOJ
TLSH
T13E46F1432BE640B9D68F65B511B3AB1FF772A625071280F7D7D03DC1AA217C26A347E2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

312056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatW LoadLibraryW GetTickCount lstrcmpiA VirtualQuery VirtualProtect IsBadWritePtr SetEnvironmentVariableA lstrcmpiW InterlockedIncrement InterlockedDecrement SetLastError HeapFree GetProcessHeap HeapReAlloc HeapAlloc FindResourceExA GetUserDefaultUILanguage GetCurrentProcessId CloseHandle WaitForSingleObject CompareStringA GetLastError GetEnvironmentVariableA CompareStringW SetEvent lstrcpyW FindFirstFileW FindClose FormatMessageA GetSystemTimeAsFileTime WriteFile SetFileTime CreateFileA ReadFile IsBadReadPtr CreateEventA GetModuleFileNameA SetFilePointer GetCurrentProcess GetWindowsDirectoryA GetVolumeInformationA GetFileAttributesExA GetFullPathNameA FindFirstFileExA FindNextFileA IsWow64Process GetModuleFileNameW FreeLibrary SetEnvironmentVariableW FlushInstructionCache FlushFileBuffers WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetLocaleInfoW IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA QueryPerformanceCounter GetCommandLineW GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetConsoleMode GetConsoleCP GetStartupInfoA GetFileType SetHandleCount GetTimeZoneInformation IsValidCodePage GetOEMCP GetCurrentThreadId TlsFree TlsSetValue TlsAlloc TlsGetValue GetStdHandle HeapCreate VirtualFree GetCPInfo LCMapStringW LCMapStringA RtlUnwind GetStartupInfoW IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess CreateThread ResumeThread ExitThread GetSystemInfo VirtualAlloc GetThreadLocale GetLocaleInfoA GetACP HeapSize HeapDestroy GetVersionExA RaiseException WideCharToMultiByte lstrlenW ExitProcess lstrcmpA LoadLibraryA GetProcAddress MultiByteToWideChar Sleep WaitForMultipleObjects DeleteCriticalSection InitializeCriticalSection GlobalFree InterlockedExchange GlobalUnlock LeaveCriticalSection GlobalLock GlobalAlloc EnterCriticalSection LockResource LoadResource SizeofResource FindResourceA lstrcpyA lstrlenA GetModuleHandleA

user32

UnregisterClassA LoadCursorA GetWindowLongA GetWindowRect SetCursor SetFocus MessageBoxW SetWindowLongA GetSystemMetrics GetCursorPos GetParent MapWindowPoints GetDesktopWindow SendMessageA SetWindowPos ReleaseCapture SetForegroundWindow PostMessageA BeginPaint GetMessageA TranslateMessage DrawIcon DispatchMessageA LoadIconA CreateDialogIndirectParamA SetTimer EndPaint KillTimer DestroyWindow EndDialog PtInRect LoadStringA GetDC FillRect GetClientRect ReleaseDC SetClassLongA wsprintfA EnableWindow GetActiveWindow UpdateWindow CallWindowProcA AdjustWindowRectEx CreateWindowExA RegisterClassExA DefWindowProcA ShowWindow TranslateAcceleratorA DrawFocusRect DrawTextA SetCapture GetWindowTextA DrawEdge OffsetRect InvalidateRect LoadImageA GetClassNameA ScreenToClient PostQuitMessage GetWindowTextLengthA SetWindowTextA TrackMouseEvent SetActiveWindow IsDialogMessageA MessageBoxA

gdi32

GetDIBColorTable SetDIBColorTable StretchBlt CreateFontIndirectA DeleteObject CreateDIBSection CreateSolidBrush SelectObject MoveToEx CreatePen CreateCompatibleBitmap BitBlt CreateCompatibleDC TextOutA DeleteDC SetTextColor GetStockObject SetBkMode GetTextExtentPointA LineTo GetObjectA

advapi32

RegQueryValueExA RegDeleteValueA RegCreateKeyExA RegCloseKey RegSetValueExA

shell32

SHGetFolderPathA

ole32

CoInitializeEx CoUninitialize CoCreateInstance CoSetProxyBlanket CreateStreamOnHGlobal

oleaut32

GetErrorInfo SafeArrayDestroy SafeArrayGetElement SafeArrayPutElement SafeArrayGetLBound SafeArrayGetUBound VariantChangeType VariantClear VariantInit SystemTimeToVariantTime VariantTimeToSystemTime SysStringLen SysFreeString SysAllocString SafeArrayCreateVector SafeArrayAccessData SafeArrayUnaccessData SysAllocStringLen

gdiplus

GdipAlloc GdipFree GdiplusShutdown GdiplusStartup GdipCreateBitmapFromScan0 GdipDisposeImage GdipGetImagePalette GdipDeleteGraphics GdipGetImagePaletteSize GdipGetImageGraphicsContext GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipCloneImage GdipBitmapUnlockBits GdipBitmapLockBits GdipDrawImageI GdipCreateBitmapFromStream

msimg32

TransparentBlt AlphaBlend

iphlpapi

GetAdaptersInfo

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-10_0537824f130e6f501f19830e5f39cfe6_elex_stop

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

gdiplus

msimg32

iphlpapi

version

generic