Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
- submitted
28/06/2026, 21:10
General
- Target 2026-06-28_84127120c0ba9ecf8ef910874c89eb10_elex_stop.exe
- Size 5.2MB
- Sample260628-zz5vxset3v
- SHA256 3402e3128ebf10cac47444ca94d857c7ea9e82199956ae78ddde8475e753e3c0
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-28_84127120c0ba9ecf8ef910874c89eb10_elex_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-28_84127120c0ba9ecf8ef910874c89eb10_elex_stop.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/6424-2-0x0000000002860000-0x0000000002977000-memory.dmp
memory/6424-4-0x0000000002860000-0x0000000002977000-memory.dmp
memory/6424-45-0x0000000005180000-0x0000000005181000-memory.dmp
memory/6424-44-0x00000000051A0000-0x00000000051A1000-memory.dmp
memory/6424-46-0x00000000051B0000-0x00000000051B1000-memory.dmp
memory/6424-43-0x00000000052B0000-0x00000000052B1000-memory.dmp
memory/6424-42-0x00000000052A0000-0x00000000052A1000-memory.dmp
memory/6424-41-0x00000000052D0000-0x00000000052D1000-memory.dmp
memory/6424-40-0x00000000051C0000-0x00000000051C1000-memory.dmp
memory/6424-39-0x00000000051D0000-0x00000000051D1000-memory.dmp
memory/6424-38-0x0000000002840000-0x0000000002841000-memory.dmp
memory/6424-37-0x0000000005240000-0x0000000005241000-memory.dmp
memory/6424-36-0x0000000005290000-0x0000000005291000-memory.dmp
memory/6424-35-0x0000000005280000-0x0000000005281000-memory.dmp
memory/6424-34-0x00000000051F0000-0x00000000051F1000-memory.dmp
memory/6424-33-0x00000000051E0000-0x00000000051E1000-memory.dmp
memory/6424-32-0x0000000002B70000-0x0000000002B71000-memory.dmp
memory/6424-31-0x0000000002980000-0x0000000002981000-memory.dmp
memory/6424-30-0x00000000775D8000-0x00000000775D9000-memory.dmp
memory/6424-29-0x0000000005270000-0x0000000005271000-memory.dmp
memory/6424-28-0x0000000000C60000-0x0000000000C61000-memory.dmp
memory/6424-3-0x0000000002860000-0x0000000002977000-memory.dmp
memory/6424-24-0x0000000010000000-0x0000000010005000-memory.dmp
memory/6424-21-0x0000000010000000-0x0000000010005000-memory.dmp
memory/6424-19-0x0000000010000000-0x0000000010005000-memory.dmp
memory/6424-13-0x0000000010000000-0x0000000010005000-memory.dmp
memory/6424-0-0x00000000746C0000-0x0000000074E7C000-memory.dmp
memory/6424-15-0x0000000010000000-0x0000000010005000-memory.dmp
memory/6424-47-0x0000000002B60000-0x0000000002B61000-memory.dmp
memory/6424-49-0x0000000005250000-0x0000000005251000-memory.dmp
memory/6424-48-0x0000000005200000-0x0000000005201000-memory.dmp
memory/6424-52-0x0000000005150000-0x0000000005151000-memory.dmp
memory/6424-51-0x0000000005140000-0x0000000005141000-memory.dmp
memory/6424-50-0x0000000002B50000-0x0000000002B51000-memory.dmp
memory/6424-53-0x0000000005210000-0x0000000005211000-memory.dmp
memory/6424-54-0x0000000002860000-0x0000000002977000-memory.dmp