2026-11-03_6a905810d31e1841ef7d1297d90f9335_elex_maze_stealc

General

Target
2026-11-03_6a905810d31e1841ef7d1297d90f9335_elex_maze_stealc
Size 2.2MB
Sample261104-wkv6dset9j
SHA256 b67f5fcaf47acf32209f2bd7fee35f82edbbe97514e316c53e9cdb2dd7d2fcbc
MD5 6a905810d31e1841ef7d1297d90f9335
SHA1 58728fc5efc5f531e36c532c44bbc78c90fa038c
SHA512 a8832ff47464ec207d2e35a1965fc81962aa33820b5dd12ecfa6964da920c751c2f2d9654daa5899fd3a0e1f9a696fe711136a52860e8a90964845e25fd9dd1d
SSDEEP 24576:YZyOk0JCrpZlMGqOVmnbhIX7n0RBtHgNotIz+uucsG4AMYNV9epw19:YZgMCHk7benmBtANFuco8QY
TLSH
T1A7B523307EE2D277D6A7093501EB97669E3D7C760E20A042B7E02F0D47B85A16637E36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_6a905810d31e1841ef7d1297d90f9335_elex_maze_stealc

File Explorer

2026-11-03_6a905810d31e1841ef7d1297d90f9335_elex_maze_stealc

.exe 2.2MB

2026-11-03_6a905810d31e1841ef7d1297d90f9335_elex_maze_stealc

IMPHASH d8dfd23c9b798484696bbaf1499e9651
SHA256 b67f5fcaf47acf32209f2bd7fee35f82edbbe97514e316c53e9cdb2dd7d2fcbc
MD5 6a905810d31e1841ef7d1297d90f9335
SHA1 58728fc5efc5f531e36c532c44bbc78c90fa038c
SHA512 a8832ff47464ec207d2e35a1965fc81962aa33820b5dd12ecfa6964da920c751c2f2d9654daa5899fd3a0e1f9a696fe711136a52860e8a90964845e25fd9dd1d
SSDEEP 24576:YZyOk0JCrpZlMGqOVmnbhIX7n0RBtHgNotIz+uucsG4AMYNV9epw19:YZgMCHk7benmBtANFuco8QY
TLSH
T1A7B523307EE2D277D6A7093501EB97669E3D7C760E20A042B7E02F0D47B85A16637E36
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

67945

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer GetLastError ExitProcess GetModuleHandleExW GetProcAddress AreFileApisANSI MultiByteToWideChar WideCharToMultiByte ReadFile LocalFileTimeToFileTime SetFileTime SystemTimeToFileTime HeapFree HeapAlloc GetStdHandle GetFileType GetModuleFileNameW WriteConsoleW GetCommandLineA DeleteCriticalSection IsDebuggerPresent IsProcessorFeaturePresent GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo RtlUnwind CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx ReadConsoleW FindClose FindFirstFileExW GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SetStdHandle GetProcessHeap OutputDebugStringW GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc HeapSize CompareStringW LCMapStringW GetStringTypeW FileTimeToLocalFileTime GetFileInformationByHandle PeekNamedPipe GetFullPathNameW GetCurrentDirectoryW CreateFileW GetTimeZoneInformation SetEndOfFile SetEnvironmentVariableA GetThreadLocale LoadLibraryA FormatMessageA

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_6a905810d31e1841ef7d1297d90f9335_elex_maze_stealc

kernel32

generic