Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
02/08/2026, 03:01
General
- Target 2026-08-02_7060b64c2fbd5127d7d0b5fc880ef833_elex_stop.exe
- Size 5.2MB
- Sample260802-dh8plack6w
- SHA256 56299da0e4e1e0d71765909e8cc3fd46905a91dfdbe6a60703b4e94fb041f0a8
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-02_7060b64c2fbd5127d7d0b5fc880ef833_elex_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-02_7060b64c2fbd5127d7d0b5fc880ef833_elex_stop.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1796-1-0x0000000002930000-0x0000000002A4A000-memory.dmp
memory/1796-0-0x0000000002930000-0x0000000002A4A000-memory.dmp
memory/1796-9-0x0000000002930000-0x0000000002A4A000-memory.dmp
memory/1796-24-0x0000000010000000-0x0000000010005000-memory.dmp
memory/1796-46-0x0000000005170000-0x0000000005171000-memory.dmp
memory/1796-45-0x0000000005190000-0x0000000005191000-memory.dmp
memory/1796-42-0x00000000052C0000-0x00000000052C1000-memory.dmp
memory/1796-38-0x00000000027A0000-0x00000000027A1000-memory.dmp
memory/1796-41-0x00000000051A0000-0x00000000051A1000-memory.dmp
memory/1796-40-0x00000000051B0000-0x00000000051B1000-memory.dmp
memory/1796-39-0x00000000051C0000-0x00000000051C1000-memory.dmp
memory/1796-36-0x0000000005280000-0x0000000005281000-memory.dmp
memory/1796-34-0x00000000051E0000-0x00000000051E1000-memory.dmp
memory/1796-31-0x00000000028C0000-0x00000000028C1000-memory.dmp
memory/1796-32-0x0000000005110000-0x0000000005111000-memory.dmp
memory/1796-30-0x0000000076F48000-0x0000000076F49000-memory.dmp
memory/1796-21-0x0000000010000000-0x0000000010005000-memory.dmp
memory/1796-18-0x0000000010000000-0x0000000010005000-memory.dmp
memory/1796-28-0x0000000074030000-0x00000000747EC000-memory.dmp
memory/1796-15-0x0000000010000000-0x0000000010005000-memory.dmp
memory/1796-13-0x0000000010000000-0x0000000010005000-memory.dmp
memory/1796-52-0x00000000050F0000-0x00000000050F1000-memory.dmp
memory/1796-51-0x0000000005140000-0x0000000005141000-memory.dmp
memory/1796-50-0x0000000005130000-0x0000000005131000-memory.dmp
memory/1796-49-0x0000000005240000-0x0000000005241000-memory.dmp
memory/1796-48-0x00000000051F0000-0x00000000051F1000-memory.dmp
memory/1796-47-0x0000000005100000-0x0000000005101000-memory.dmp
memory/1796-44-0x00000000052A0000-0x00000000052A1000-memory.dmp
memory/1796-43-0x0000000005290000-0x0000000005291000-memory.dmp
memory/1796-37-0x0000000005230000-0x0000000005231000-memory.dmp
memory/1796-53-0x0000000005200000-0x0000000005201000-memory.dmp
memory/1796-35-0x0000000005270000-0x0000000005271000-memory.dmp
memory/1796-33-0x00000000051D0000-0x00000000051D1000-memory.dmp
memory/1796-29-0x0000000005260000-0x0000000005261000-memory.dmp
memory/1796-12-0x00000000026F0000-0x00000000026F1000-memory.dmp
memory/1796-2-0x0000000002930000-0x0000000002A4A000-memory.dmp
memory/1796-54-0x0000000002930000-0x0000000002A4A000-memory.dmp