2026-10-27_f7be23b049f1651c99c0eb052af46002_elex_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-27_f7be23b049f1651c99c0eb052af46002_elex_stop
Size 756KB
Sample261027-zzb8lsfz71
SHA256 24079986c4c3ab6931ae64877c07535a7c3d79743efba7261fdf1f79cae181fe
MD5 f7be23b049f1651c99c0eb052af46002
SHA1 b5061eb3b7b641795fd81936f312b5142d654567
SHA512 9b62d98451b61502db06317500f8ba158967936b0be1bc29fc26db93f4a1a1a567fd4c40177a89ea945b3bfcb328f8550210b5a426a0034e7c7db4daa53b3dd0
SSDEEP 12288:gbqYtvHVJ/JOJBw7pvSdzq0w5GFwJqRl7k86fpgBDDJrS7LE9HTFIUYVRSs5KmBa:gbqYtvHVJ/JOJBw7pvSdzdw5GuJS7kFF
TLSH
T129F4AE2657C0C47DE5F680F6F6B348680D957F5A138A21DB1AE82C958BF08EAC5B11CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-27_f7be23b049f1651c99c0eb052af46002_elex_stop

File Explorer

2026-10-27_f7be23b049f1651c99c0eb052af46002_elex_stop

.exe 756KB

2026-10-27_f7be23b049f1651c99c0eb052af46002_elex_stop

IMPHASH dc072b97ab69d9cf474e33b457c157dd
SHA256 24079986c4c3ab6931ae64877c07535a7c3d79743efba7261fdf1f79cae181fe
MD5 f7be23b049f1651c99c0eb052af46002
SHA1 b5061eb3b7b641795fd81936f312b5142d654567
SHA512 9b62d98451b61502db06317500f8ba158967936b0be1bc29fc26db93f4a1a1a567fd4c40177a89ea945b3bfcb328f8550210b5a426a0034e7c7db4daa53b3dd0
SSDEEP 12288:gbqYtvHVJ/JOJBw7pvSdzq0w5GFwJqRl7k86fpgBDDJrS7LE9HTFIUYVRSs5KmBa:gbqYtvHVJ/JOJBw7pvSdzdw5GuJS7kFF
TLSH
T129F4AE2657C0C47DE5F680F6F6B348680D957F5A138A21DB1AE82C958BF08EAC5B11CB
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

712146

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateThread GlobalUnlock GlobalLock GlobalAlloc GetTickCount WideCharToMultiByte IsBadReadPtr GlobalAddAtomA GlobalAddAtomW GetModuleHandleA GlobalFree GlobalGetAtomNameA GlobalDeleteAtom GlobalGetAtomNameW FreeConsole GetEnvironmentVariableA VirtualProtect VirtualAlloc GetProcAddress GetLastError LoadLibraryA SetLastError SetThreadPriority GetCurrentThread CreateProcessA GetCommandLineA GetStartupInfoA SetEnvironmentVariableA ReleaseMutex WaitForSingleObject CreateMutexA OpenMutexA GetCurrentThreadId CreateFileA FindClose FindFirstFileA FindFirstFileW VirtualQueryEx GetExitCodeProcess ReadProcessMemory UnmapViewOfFile ContinueDebugEvent SetThreadContext GetThreadContext WaitForDebugEvent SuspendThread DebugActiveProcess ResumeThread CreateProcessW GetCommandLineW GetStartupInfoW CloseHandle DuplicateHandle GetCurrentProcess CreateFileMappingA VirtualProtectEx WriteProcessMemory ExitProcess FlushFileBuffers WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetConsoleMode GetConsoleCP SetFilePointer GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA HeapSize HeapReAlloc QueryPerformanceCounter VirtualFree HeapCreate HeapDestroy GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA RtlUnwind DeleteCriticalSection GetStdHandle WriteFile TlsFree TlsSetValue TlsAlloc TlsGetValue Sleep EnterCriticalSection LeaveCriticalSection GetVersionExA InitializeCriticalSection GetCurrentProcessId GetModuleFileNameW GetShortPathNameW GetModuleFileNameA MapViewOfFile GetShortPathNameA GetSystemTimeAsFileTime HeapFree HeapAlloc GetProcessHeap RaiseException TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage

user32

GetDesktopWindow MoveWindow SetPropA EnumThreadWindows GetPropA GetMessageA GetSystemMetrics SetTimer GetAsyncKeyState KillTimer BeginPaint EndPaint SetWindowTextA GetDlgItem CreateDialogIndirectParamA ShowWindow UpdateWindow LoadStringA LoadStringW FindWindowA WaitForInputIdle MessageBoxA InSendMessage UnpackDDElParam FreeDDElParam DefWindowProcA LoadCursorA RegisterClassW CreateWindowExW RegisterClassA CreateWindowExA GetWindowThreadProcessId SendMessageW SendMessageA PeekMessageA TranslateMessage DispatchMessageA EnumWindows IsWindowUnicode PackDDElParam PostMessageW PostMessageA IsWindow DestroyWindow

gdi32

CreateDCA CreateDIBitmap CreateCompatibleDC SelectObject SelectPalette RealizePalette BitBlt DeleteDC DeleteObject CreatePalette

Name

.text

Size

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

362KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text1

Size

264KB

Virtual Size

320KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

52KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

44KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc1

Size

20KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.pdata

Size

340KB

Virtual Size

384KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

28KB

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Rp:[Xe

Size

4KB

Virtual Size

64B

Characteristics

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-27_f7be23b049f1651c99c0eb052af46002_elex_stop

kernel32

user32

gdi32

generic