Overview

overview

10

Static

static

10

2026-07-11...op.exe

windows10-2004-x64

9

2026-07-11...op.exe

windows11-ltsc_2024-x64

9

Analysis

  • max time kernel
    148s
  • max time network
    137s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    11/07/2026, 15:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-11_d58bacc34dd3db8c9eedaff306f0941c_coinminer_elex_stop.exe
  • Size 2.0MB
  • Sample260711-shya7aez71
  • SHA256 86d9a9ddf20360f938bcc787fb64984f0aa901505bd0048f973eebd91101ac31
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
adwaredefense_evasiondiscoveryspywareupx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 4 IoCs
  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 1 IoCs
    defense_evasion
  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
    adwarespyware
  • Modifies registry class 8 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-11_d58bacc34dd3db8c9eedaff306f0941c_coinminer_elex_stop.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-11_d58bacc34dd3db8c9eedaff306f0941c_coinminer_elex_stop.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Modifies Internet Explorer settings
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3484
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 3484 -s 1348
      2⤵
      • Program crash
      PID:5724
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3484 -ip 3484
    1⤵
      PID:5736

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          style-ie7.css
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\css\style-ie7.css
          • Size 904B
          • SHA256 a7b66e20140881d7b57009fc22647b005c0a94515d66af57367302a34227c66b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          style.css
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\css\style.css
          • Size 7KB
          • SHA256 36898487c21daf59cf0b6f1437a109717c9890d3ea815c962a4881f99783ffa9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AgreementScreen.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\AgreementScreen.jpg
          • Size 9KB
          • SHA256 1f4b39dda7a2c4181c7164cdd35e60d04cd232208613bf2bef99b9450ff3915b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CatalogueScreen.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\CatalogueScreen.jpg
          • Size 18KB
          • SHA256 621cdb5117b14db8804bc9fd2472b00c0d809a97975b443400a0b901d7452910
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DownloadsScreen.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\DownloadsScreen.jpg
          • Size 15KB
          • SHA256 5cda60d4abb1d57b6f10e0d91d4f9a8100d95aaa1ac118d218f981b71c6154c1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          FeaturesScreen.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\FeaturesScreen.jpg
          • Size 12KB
          • SHA256 3e5faa57bfc6def55ae8052f5aa8efc258a3ad8f3cb9b40691a8b565071fba04
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          InstallScreen.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\InstallScreen.jpg
          • Size 16KB
          • SHA256 5808ddc486e21f939ef8613b5793fa64f2c2491a76455dfb1a184ef04c04292b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Marker.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\Marker.jpg
          • Size 771B
          • SHA256 99793d62273ab6b91ec41fb4fa9ff08f91661a3ddb85fa128e1724f1572d7134
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          MediaLibraryScreen.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\MediaLibraryScreen.jpg
          • Size 15KB
          • SHA256 d1c443a32e41d0e54b26f3d775342ccd963892c82a8ef651280f2d8d4612566e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MediaPlayerScreen.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\MediaPlayerScreen.jpg
          • Size 10KB
          • SHA256 b5beb00448cd2f9bb8c148ddaa20f97474a41fb965b60bb5ac3181924c1e5e27
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SearchScreen.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\SearchScreen.jpg
          • Size 24KB
          • SHA256 459ffe46bd712ad7300627dc062e97b25902d0fc1945c1002f2ddd29b383f64d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TabBg.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\TabBg.jpg
          • Size 1KB
          • SHA256 6ff2ede122e7a8c88cddf2074ef64a191501b8cdb2d007a7acbf9fdcbe1b15a2
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          babylonlogoleft.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\babylonlogoleft.jpg
          • Size 2KB
          • SHA256 709bc580222dd517d80492ffe7e2289bbf748fc6c5e2504c9440731b3e96faa1
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          babylonlogoupper.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\babylonlogoupper.jpg
          • Size 4KB
          • SHA256 18002db0aa781edfa93608ae493c0bc7a558f84ecde69da692e9e56f19c0c757
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          check.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\check.jpg
          • Size 1KB
          • SHA256 2e19f60efa95f693c0b1a00605df9e4d2ab22bb2b388f828118f5a91396635d2
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          finish-flags.png
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\finish-flags.png
          • Size 14KB
          • SHA256 a98567be6cb7f78237862f451d479df10402d6ab7d8f807476fee069efbb66e2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          header_cycle_arrows_shape.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\header_cycle_arrows_shape.jpg
          • Size 2KB
          • SHA256 a2c2c1fd5f0273adf862bfdb3d2539e8f278792ea85d70e91ef0b1d1cba1adfa
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          installbutton.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\installbutton.jpg
          • Size 367B
          • SHA256 db4a08aca4e4a97db0dd3caed7d660b4f5028597f1583e604a2918b1eaf4dc83
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          kaspersky.gif
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\kaspersky.gif
          • Size 4KB
          • SHA256 e0a0d2f03fffdb05f019b5e35869367606f24a00a26739bba825a6efb78bb98e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          loadinfo1.gif
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\loadinfo1.gif
          • Size 6KB
          • SHA256 8e828b825886d6cffcbd968c323287a676586eda096db4eee58957ade5dfcd20
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          logo.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\logo.jpg
          • Size 2KB
          • SHA256 e34901a370661bb015b7ebd6d5ce33ae4dbff08f12dfbb65b7d3f8cc48fd288e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          menuBg.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\menuBg.jpg
          • Size 2KB
          • SHA256 35a2ac79c81dfb8c3ccb23713b3ca93d3713542f822aa46f0d63c7b473b11499
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          next.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\next.jpg
          • Size 664B
          • SHA256 ecc4d9ba2c50cdecfd3fb4c9089be82ba897857721d394e5c953a7d1d469f885
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          start_en.jpg
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\start_en.jpg
          • Size 1KB
          • SHA256 d3feae909b667e7117cdca18f386fe70cfaf48d99286fa7d66a7157d385d275a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          index.html
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\index.html
          • Size 11KB
          • SHA256 19526a5fe83a076cad4af7f51b4029b9a1d05e6a9f020d83d201d86cc311f3af
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DD_belatedPNG.js
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\scripts\DD_belatedPNG.js
          • Size 5KB
          • SHA256 8c61dcfbc3dda3c82b2bbe977d816ed71cfb98a12545f2b2b1d218178e13b238
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          jquery.js
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\scripts\jquery.js
          • Size 89KB
          • SHA256 c784376960f3163dc760bc019e72e5fed78203745a5510c69992a39d1d8fe776
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          scripts.js
          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\scripts\scripts.js
          • Size 2KB
          • SHA256 4c7edbc76ee5063dda92a378b41f7d6f4c88489bf6fb9a536794cbfc483e53be
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          memory/3484-3-0x0000000000400000-0x00000000005FF000-memory.dmp
          Download

          memory/3484-0-0x0000000000400000-0x00000000005FF000-memory.dmp
          Download

          memory/3484-1-0x0000000000489000-0x000000000048A000-memory.dmp
          Download

          memory/3484-2-0x0000000000400000-0x00000000005FF000-memory.dmp
          Download

          memory/3484-263-0x0000000000400000-0x00000000005FF000-memory.dmp
          Download