Overview

overview

3

Static

static

3

2026-08-21...op.exe

windows10-2004-x64

3

2026-08-21...op.exe

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    144s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    21/08/2026, 04:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-21_835caaa013dd017e33a0db42c4a5d023_elex_stop.exe
  • Size 2.3MB
  • Sample260821-exhmdssfnd
  • SHA256 ab13a087122d3bb91b6c865e95cd0e6e039622bb3d93e2bc998e6383963ce79a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-21_835caaa013dd017e33a0db42c4a5d023_elex_stop.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-21_835caaa013dd017e33a0db42c4a5d023_elex_stop.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:6844

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Exit.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\Exit.bmp
        • Size 822B
        • SHA256 b002f6e879c13b598096fb413d2f752902ded8c2c875d17dff15ce6cfb3252ee
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Exit_mo.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\Exit_mo.bmp
        • Size 822B
        • SHA256 68d888f8b86e9ac53a23064182466cffd185db5aba9d86f0f38ca5192fe07004
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        background.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\background.bmp
        • Size 498KB
        • SHA256 78c143997eab801db27ae1b4e9cd0c4223c4427e2647565f44bc9ca54949a1d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        start.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\start.bmp
        • Size 22KB
        • SHA256 d7352834586d7c48d55e9dd6b4959f305670ad3027c90cb000ca4780aee48dfb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        start_d.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\start_d.bmp
        • Size 22KB
        • SHA256 ccc93644dbd5f513238532b204e3c800349871e10a84da52db42d4554162804f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        start_mo.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\start_mo.bmp
        • Size 22KB
        • SHA256 dabf1dce4f0c3fe19e848d2d08a93f4765bf6d895b4be4b61cc280eb68da470e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UISettings.ini
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\UISettings.ini
        • Size 2KB
        • SHA256 6b0e53452e06d16a08fa7e458a3641a96635a31166455b3dd7495d32e5601fc8
        • MD5 SHA1 SHA512 TLSH
        Submit Download