General
- Target Elsify.exe
- Size 40.0MB
- Sample261102-g86vgafx5s
- SHA256 d707be7484cf139f78f62b22e56b3cede4e71838465771b9f6389f0596c0346f
- MD5 9ee4494343fe1bae95f6b5443771dd62
- SHA1 5aee54d7da7896168919b77bc9b96ce186305b1f
- SHA512 90a546ecf1c97af2863aba77d5604f464292e3a223fc3fb247498e01b5d5faacd762f2daaab303614236f085bf2101a2eac4c3cd39017293d8721adf9d0fd597
- SSDEEP 393216:cUo6LGgjctJYGdPKRlRY4+koT1hiAgaI8AIpER:cUo6aZOGJqoT1hiAIR
- TLSH T186979D0323968E2ED99F1BBAE0D14325D739DA06A75793DB240C99991FC33C15A343FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
Elsify.exe
Resource
win10v2004-20260911-en
22 signatures
300 seconds
Behavioral task
behavioral2
Sample
Elsify.exe
Resource
win11ltsc2024-20260911-en
14 signatures
300 seconds
Malware Config
Targets
-
- Target Elsify.exe
- Size 40.0MB
- SHA256 d707be7484cf139f78f62b22e56b3cede4e71838465771b9f6389f0596c0346f
- MD5 9ee4494343fe1bae95f6b5443771dd62
- SHA1 5aee54d7da7896168919b77bc9b96ce186305b1f
- SHA512 90a546ecf1c97af2863aba77d5604f464292e3a223fc3fb247498e01b5d5faacd762f2daaab303614236f085bf2101a2eac4c3cd39017293d8721adf9d0fd597
- SSDEEP 393216:cUo6LGgjctJYGdPKRlRY4+koT1hiAgaI8AIpER:cUo6aZOGJqoT1hiAIR
- TLSH T186979D0323968E2ED99F1BBAE0D14325D739DA06A75793DB240C99991FC33C15A343FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Downloads MZ/PE file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1