Overview

overview

3

Static

static

1

2026-08-16...op.exe

windows10-2004-x64

3

2026-08-16...op.exe

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    139s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    16/08/2026, 08:40

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-16_08982a17f65d3a19fe66f417b411b2cd_elex_stop.exe
  • Size 2.3MB
  • Sample260816-klbbtstyay
  • SHA256 0aa101156eb18ed9c1b9018ef7c9bffa7710456350b7f24e71db70d9bf6df8b1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-16_08982a17f65d3a19fe66f417b411b2cd_elex_stop.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-16_08982a17f65d3a19fe66f417b411b2cd_elex_stop.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:6284

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Exit.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\Exit.bmp
        • Size 822B
        • SHA256 b002f6e879c13b598096fb413d2f752902ded8c2c875d17dff15ce6cfb3252ee
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Exit_mo.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\Exit_mo.bmp
        • Size 822B
        • SHA256 68d888f8b86e9ac53a23064182466cffd185db5aba9d86f0f38ca5192fe07004
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        background.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\background.bmp
        • Size 498KB
        • SHA256 d444c39a228aebc90d21b0d30db1c88d46e707bde28e6b15c5321d5ba36b69d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        start.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\start.bmp
        • Size 22KB
        • SHA256 d7352834586d7c48d55e9dd6b4959f305670ad3027c90cb000ca4780aee48dfb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        start_d.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\start_d.bmp
        • Size 22KB
        • SHA256 ccc93644dbd5f513238532b204e3c800349871e10a84da52db42d4554162804f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        start_mo.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\start_mo.bmp
        • Size 22KB
        • SHA256 dabf1dce4f0c3fe19e848d2d08a93f4765bf6d895b4be4b61cc280eb68da470e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UISettings.ini
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\UISettings.ini
        • Size 3KB
        • SHA256 c4a0f0dff35f6a339f028252c223cae55109c66219c708408f30617ca5bc0b6b
        • MD5 SHA1 SHA512 TLSH
        Submit Download