Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
08/05/2026, 20:36
General
- Target 2026-05-08_50217a92cb6c78c1295bdf4baa776edb_elex_stop.exe
- Size 3.5MB
- Sample260508-zdsy8sdw21
- SHA256 aa9d18a9392bf5579c6b6de21cba298b7a98ebbefcab1904476c5bb2aeae0aa9
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-08_50217a92cb6c78c1295bdf4baa776edb_elex_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-08_50217a92cb6c78c1295bdf4baa776edb_elex_stop.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4892-0-0x0000000004E10000-0x0000000004F2A000-memory.dmp
memory/4892-1-0x0000000004E10000-0x0000000004F2A000-memory.dmp
memory/4892-4-0x0000000004E10000-0x0000000004F2A000-memory.dmp
memory/4892-12-0x0000000010000000-0x0000000010005000-memory.dmp
memory/4892-44-0x00000000072B0000-0x00000000072B1000-memory.dmp
memory/4892-46-0x0000000004DE0000-0x0000000004DE1000-memory.dmp
memory/4892-45-0x00000000072E0000-0x00000000072E1000-memory.dmp
memory/4892-43-0x00000000072D0000-0x00000000072D1000-memory.dmp
memory/4892-42-0x00000000073E0000-0x00000000073E1000-memory.dmp
memory/4892-41-0x00000000073D0000-0x00000000073D1000-memory.dmp
memory/4892-40-0x00000000072F0000-0x00000000072F1000-memory.dmp
memory/4892-39-0x0000000007300000-0x0000000007301000-memory.dmp
memory/4892-38-0x00000000026B0000-0x00000000026B1000-memory.dmp
memory/4892-37-0x0000000007370000-0x0000000007371000-memory.dmp
memory/4892-36-0x00000000073C0000-0x00000000073C1000-memory.dmp
memory/4892-35-0x00000000073B0000-0x00000000073B1000-memory.dmp
memory/4892-34-0x0000000007320000-0x0000000007321000-memory.dmp
memory/4892-33-0x0000000007310000-0x0000000007311000-memory.dmp
memory/4892-32-0x0000000004DF0000-0x0000000004DF1000-memory.dmp
memory/4892-31-0x0000000004230000-0x0000000004231000-memory.dmp
memory/4892-30-0x0000000077384000-0x0000000077385000-memory.dmp
memory/4892-29-0x00000000073A0000-0x00000000073A1000-memory.dmp
memory/4892-27-0x0000000074280000-0x0000000074A31000-memory.dmp
memory/4892-28-0x0000000002630000-0x0000000002631000-memory.dmp
memory/4892-23-0x0000000010000000-0x0000000010005000-memory.dmp
memory/4892-20-0x0000000010000000-0x0000000010005000-memory.dmp
memory/4892-17-0x0000000010000000-0x0000000010005000-memory.dmp
memory/4892-15-0x0000000010000000-0x0000000010005000-memory.dmp
memory/4892-2-0x0000000004E10000-0x0000000004F2A000-memory.dmp
memory/4892-47-0x0000000004E10000-0x0000000004F2A000-memory.dmp