83b01be70c83680099dce399f7bf300027d6c464c1a94bc5995713059b24c115 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

2026-07-18...op.exe

windows10-2004-x64

8

2026-07-18...op.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-18_72bc0ea96b527fa5aa63769bc113e531_elex_stealc_stop
Size 7.9MB
Sample260718-jfcf9scv4m
SHA256 83b01be70c83680099dce399f7bf300027d6c464c1a94bc5995713059b24c115
MD5 72bc0ea96b527fa5aa63769bc113e531
SHA1 a1807a92e1c24bb893abf6410d194382b6c82ce3
SHA512 d1ad8466658f107b683bb6367d5dd9e4b68463df46732451a9201c120b694721e8a00a44b69a71e9cd78433c65b43b36eb4e7c40d698b93559bcc132a1c783bc
SSDEEP 196608:uWx5KxGkaNk4LdYDdA5tsOmPPtQ8M/3mFTicHZw:uWxO4GDdA4bPPtQ8MOY0w
TLSH
T1A086121376C1C03FE1B208728C6F9EB842A17D675A30495B7594FE2C2EF4592B927F1A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence privilege_escalation ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-18_72bc0ea96b527fa5aa63769bc113e531_elex_stealc_stop.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

17 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation ransomware

Behavioral task

behavioral2

Sample

2026-07-18_72bc0ea96b527fa5aa63769bc113e531_elex_stealc_stop.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

18 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation ransomware

Malware Config

Targets

- Target
  2026-07-18_72bc0ea96b527fa5aa63769bc113e531_elex_stealc_stop
- Size 7.9MB
- SHA256 83b01be70c83680099dce399f7bf300027d6c464c1a94bc5995713059b24c115
- MD5 72bc0ea96b527fa5aa63769bc113e531
- SHA1 a1807a92e1c24bb893abf6410d194382b6c82ce3
- SHA512 d1ad8466658f107b683bb6367d5dd9e4b68463df46732451a9201c120b694721e8a00a44b69a71e9cd78433c65b43b36eb4e7c40d698b93559bcc132a1c783bc
- SSDEEP 196608:uWx5KxGkaNk4LdYDdA5tsOmPPtQ8M/3mFTicHZw:uWxO4GDdA4bPPtQ8MOY0w
- TLSH
  T1A086121376C1C03FE1B208728C6F9EB842A17D675A30495B7594FE2C2EF4592B927F1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence privilege_escalation ransomware
- Modifies Windows Firewall
  defense_evasion
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalationransomware

behavioral2

defense_evasiondiscoverypersistenceprivilege_escalationransomware

© 2018-2026

Terms | Privacy