Analysis

  • max time kernel
    148s
  • max time network
    115s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    15/08/2026, 03:32

General

  • Target
    2026-08-15_92fb20dc85b523199a44529f176127e1_elex_stop.exe
  • Size 1.8MB
  • Sample260815-d3tfeadf48
  • SHA256 f8407fefd1cd66003cb8b2ee17049e84141f76c72d1fde5fc971d12a9ea4da2a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-15_92fb20dc85b523199a44529f176127e1_elex_stop.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-15_92fb20dc85b523199a44529f176127e1_elex_stop.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:4220

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Exit.bmp

        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\Exit.bmp
        • Size 824B
        • SHA256 22b9bfec4e1b27b6aedd4d754e1b282a5f76b7d47f4a9484c956b164c0a1e424
        • MD5 SHA1 SHA512 TLSH

        Exit_mo.bmp

        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\Exit_mo.bmp
        • Size 824B
        • SHA256 6ce1271d7b12068bcbd98ce7e039ee7a3eaae478648fabe57c4a0217d5ce5b68
        • MD5 SHA1 SHA512 TLSH

        background.bmp

        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\background.bmp
        • Size 496KB
        • SHA256 ea0c7cc3a492618d8b3366cbbb7a5b360480cfcf347485fd4335d1c1af312929
        • MD5 SHA1 SHA512 SSDEEP TLSH

        start.bmp

        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\start.bmp
        • Size 22KB
        • SHA256 d7352834586d7c48d55e9dd6b4959f305670ad3027c90cb000ca4780aee48dfb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        start_d.bmp

        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\start_d.bmp
        • Size 22KB
        • SHA256 ccc93644dbd5f513238532b204e3c800349871e10a84da52db42d4554162804f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        start_mo.bmp

        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\start_mo.bmp
        • Size 22KB
        • SHA256 dabf1dce4f0c3fe19e848d2d08a93f4765bf6d895b4be4b61cc280eb68da470e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UISettings.ini

        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\UISettings.ini
        • Size 1KB
        • SHA256 6a56fffbb762e961f2bd4acf4299597767e0ccc0cb26ad13b4b61a5a1ab590f1
        • MD5 SHA1 SHA512 TLSH