Analysis
- max time kernel
149s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
02/08/2026, 03:01
General
- Target 2026-08-02_7060b64c2fbd5127d7d0b5fc880ef833_elex_stop.exe
- Size 5.2MB
- Sample260802-dh8plack6w
- SHA256 56299da0e4e1e0d71765909e8cc3fd46905a91dfdbe6a60703b4e94fb041f0a8
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-02_7060b64c2fbd5127d7d0b5fc880ef833_elex_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-02_7060b64c2fbd5127d7d0b5fc880ef833_elex_stop.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4192-1-0x00000000028B0000-0x00000000029CA000-memory.dmp
memory/4192-0-0x00000000028B0000-0x00000000029CA000-memory.dmp
memory/4192-2-0x00000000028B0000-0x00000000029CA000-memory.dmp
memory/4192-12-0x0000000000930000-0x0000000000931000-memory.dmp
memory/4192-45-0x0000000005120000-0x0000000005121000-memory.dmp
memory/4192-44-0x0000000005110000-0x0000000005111000-memory.dmp
memory/4192-43-0x0000000004FF0000-0x0000000004FF1000-memory.dmp
memory/4192-42-0x0000000005010000-0x0000000005011000-memory.dmp
memory/4192-41-0x0000000005140000-0x0000000005141000-memory.dmp
memory/4192-46-0x0000000005020000-0x0000000005021000-memory.dmp
memory/4192-40-0x0000000005030000-0x0000000005031000-memory.dmp
memory/4192-39-0x0000000005040000-0x0000000005041000-memory.dmp
memory/4192-38-0x0000000000B20000-0x0000000000B21000-memory.dmp
memory/4192-37-0x00000000050B0000-0x00000000050B1000-memory.dmp
memory/4192-36-0x0000000005100000-0x0000000005101000-memory.dmp
memory/4192-35-0x00000000050F0000-0x00000000050F1000-memory.dmp
memory/4192-34-0x0000000005060000-0x0000000005061000-memory.dmp
memory/4192-33-0x0000000005050000-0x0000000005051000-memory.dmp
memory/4192-32-0x0000000004F90000-0x0000000004F91000-memory.dmp
memory/4192-31-0x0000000002650000-0x0000000002651000-memory.dmp
memory/4192-30-0x0000000077562000-0x0000000077563000-memory.dmp
memory/4192-29-0x00000000050E0000-0x00000000050E1000-memory.dmp
memory/4192-24-0x0000000010000000-0x0000000010005000-memory.dmp
memory/4192-21-0x0000000010000000-0x0000000010005000-memory.dmp
memory/4192-18-0x0000000010000000-0x0000000010005000-memory.dmp
memory/4192-15-0x0000000010000000-0x0000000010005000-memory.dmp
memory/4192-13-0x0000000010000000-0x0000000010005000-memory.dmp
memory/4192-3-0x00000000028B0000-0x00000000029CA000-memory.dmp
memory/4192-49-0x00000000050C0000-0x00000000050C1000-memory.dmp
memory/4192-48-0x0000000005070000-0x0000000005071000-memory.dmp
memory/4192-52-0x0000000004FC0000-0x0000000004FC1000-memory.dmp
memory/4192-51-0x0000000004FB0000-0x0000000004FB1000-memory.dmp
memory/4192-50-0x0000000004F70000-0x0000000004F71000-memory.dmp
memory/4192-47-0x0000000004F80000-0x0000000004F81000-memory.dmp
memory/4192-28-0x00000000748B0000-0x0000000075060000-memory.dmp
memory/4192-53-0x0000000005080000-0x0000000005081000-memory.dmp
memory/4192-54-0x00000000028B0000-0x00000000029CA000-memory.dmp