2026-10-27_f4cc515e3c102702bbbe0ba8ee54565d_elex_maze

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-27_f4cc515e3c102702bbbe0ba8ee54565d_elex_maze
Size 754KB
Sample261027-1gb1kags21
SHA256 1afde5d092095f48bfc9d42346daf19cfd4890acf252dc138d93b5160767ef42
MD5 f4cc515e3c102702bbbe0ba8ee54565d
SHA1 cacaff376f3b842557930080b4345823492f6395
SHA512 2845a8a323b9f34f0f5ab3d54365f7216434d4869f9b20a8f313d4fd61f834ef2fe21e3c460dd2258066839a071c087a9f1f7d84cd49983ca677ed067e8f98c3
SSDEEP 12288:YmcFFmDFXZgr3Vk8azpcx2vVzd8Q/8xyul4C+G3eHd3v/dnm+hf73F51bC4+pvec:YihY/azpcUT8YR9hz3ZlAvepTRmo
TLSH
T12CF48E21F4418032E6E100B56AED7FBBD52D9930072995D3E3D40DADACF44E32A7A79B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-27_f4cc515e3c102702bbbe0ba8ee54565d_elex_maze

File Explorer

2026-10-27_f4cc515e3c102702bbbe0ba8ee54565d_elex_maze

.exe 754KB

2026-10-27_f4cc515e3c102702bbbe0ba8ee54565d_elex_maze

IMPHASH 54ba0266dee8bc50e7c3fba68e1ecbea
SHA256 1afde5d092095f48bfc9d42346daf19cfd4890acf252dc138d93b5160767ef42
MD5 f4cc515e3c102702bbbe0ba8ee54565d
SHA1 cacaff376f3b842557930080b4345823492f6395
SHA512 2845a8a323b9f34f0f5ab3d54365f7216434d4869f9b20a8f313d4fd61f834ef2fe21e3c460dd2258066839a071c087a9f1f7d84cd49983ca677ed067e8f98c3
SSDEEP 12288:YmcFFmDFXZgr3Vk8azpcx2vVzd8Q/8xyul4C+G3eHd3v/dnm+hf73F51bC4+pvec:YihY/azpcUT8YR9hz3ZlAvepTRmo
TLSH
T12CF48E21F4418032E6E100B56AED7FBBD52D9930072995D3E3D40DADACF44E32A7A79B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

621823

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

timeGetDevCaps timeBeginPeriod timeEndPeriod timeGetTime

wsock32

gethostbyname socket setsockopt sendto send select recvfrom gethostname ntohl ioctlsocket htons inet_ntoa connect closesocket bind __WSAFDIsSet WSAStartup WSACleanup WSAGetLastError recv

kernel32

DecodePointer EncodePointer IsProcessorFeaturePresent IsDebuggerPresent QueryPerformanceCounter CreateFileA SetConsoleMode SetConsoleCtrlHandler ReadConsoleInputA GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime DeleteFileA GetProcessAffinityMask CopyFileA GetTempFileNameA GetTempPathA WriteFile SetFileAttributesA GetFileTime OutputDebugStringA SleepEx FreeLibrary GetProcAddress LoadLibraryA GetStdHandle CreateDirectoryA GetLastError WaitForSingleObject GetCurrentProcess GlobalMemoryStatusEx LocalFree GetNumberOfConsoleInputEvents SetProcessAffinityMask FormatMessageA CloseHandle WriteConsoleOutputA GetConsoleScreenBufferInfo FlushConsoleInputBuffer SetConsoleCursorPosition SetConsoleCursorInfo SetConsoleTextAttribute SetConsoleTitleA GetConsoleMode GetFileAttributesA

shell32

SHGetFolderPathA

advapi32

GetUserNameA CryptReleaseContext CryptGenRandom CryptAcquireContextA

msvcp120

?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Syserror_map@std@@YAPBDH@Z ?_Winerror_map@std@@YAPBDH@Z ?_Xbad_alloc@std@@YAXXZ

msvcr120

_XcptFilter _amsg_exit __getmainargs __set_app_type _exit _cexit _configthreadlocale ?terminate@@YAXXZ _except1 __setusermatherr _initterm_e _initterm __initenv _fmode _commode _except_handler4_common __crtSetUnhandledExceptionFilter _invoke_watson strchr memcpy memset _libm_sse2_sqrt_precise ??2@YAPAXI@Z ??3@YAXPAX@Z atoi memmove _CxxThrowException __CxxFrameHandler3 _purecall abort atof rand srand asctime _localtime64 _time64 toupper tolower _rmdir strstr strrchr ??_V@YAXPAX@Z memchr strncpy strtok isspace calloc free malloc floor _CIatan2 _CIfmod _libm_sse2_acos_precise _libm_sse2_asin_precise _libm_sse2_cos_precise _libm_sse2_sin_precise _errno strtod _vsnprintf _HUGE fopen fwrite sscanf qsort strftime _difftime64 _mktime64 ceil _controlfp_s _libm_sse2_pow_precise sprintf strncmp exit __iob_func fprintf _fullpath _getcwd _findclose _findfirst64i32 _findnext64i32 fputs fclose fflush fread fseek ftell remove setvbuf clock vfprintf strncat _ctime64 _libm_sse2_tan_precise ferror _fseeki64 _ftelli64 _crt_debugger_hook __crtUnhandledException __crtTerminateProcess _lock _unlock _calloc_crt __dllonexit _onexit ??1type_info@@UAE@XZ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-27_f4cc515e3c102702bbbe0ba8ee54565d_elex_maze

winmm

wsock32

kernel32

shell32

advapi32

msvcp120

msvcr120

generic