General
- Target 2026-11-12_4a959025839138b59e0b822be47bf9ce_elex_stop
- Size 793KB
- Sample261113-eabwbsfy3p
- SHA256 f51d96c9ce0aa56c9031e3fcae1bd4946697ec18072765f059d5df813d514dbc
- MD5 4a959025839138b59e0b822be47bf9ce
- SHA1 169d942d5bdecf79aef8bf909517f8a3d263351e
- SHA512 97d427a4e5f612fc5af98a69241e67a47a828194a12eb1e49ab3b52276941b544f9b830f675236f8ea0b5f3e846973ccf7b154bd1224b33da4e80a92bf36bc2c
- SSDEEP 12288:s6SKqT31T6WpJY6V765jKqostkm3NbmZj+RwP7ltL1rzWxbfQjR:dxqT31T6WE6I5jKqosOm9bmZWqJtYE
- TLSH T1AE05CF537AE0A072C9B326F84BA6D369973ABD301231EB4757C03E5A5731941AB36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-11-12_4a959025839138b59e0b822be47bf9ce_elex_stop.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-12_4a959025839138b59e0b822be47bf9ce_elex_stop.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-12_4a959025839138b59e0b822be47bf9ce_elex_stop
- Size 793KB
- SHA256 f51d96c9ce0aa56c9031e3fcae1bd4946697ec18072765f059d5df813d514dbc
- MD5 4a959025839138b59e0b822be47bf9ce
- SHA1 169d942d5bdecf79aef8bf909517f8a3d263351e
- SHA512 97d427a4e5f612fc5af98a69241e67a47a828194a12eb1e49ab3b52276941b544f9b830f675236f8ea0b5f3e846973ccf7b154bd1224b33da4e80a92bf36bc2c
- SSDEEP 12288:s6SKqT31T6WpJY6V765jKqostkm3NbmZj+RwP7ltL1rzWxbfQjR:dxqT31T6WE6I5jKqosOm9bmZWqJtYE
- TLSH T1AE05CF537AE0A072C9B326F84BA6D369973ABD301231EB4757C03E5A5731941AB36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies visibility of hidden/system files in Explorer
Adds policy Run key to start application
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
Checks whether UAC is enabled
AutoIT Executable
AutoIT scripts compiled to PE executables.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
3