96e8258a3c58b22efd4810c27384a98b12ca93801b9eb8afb44cae660508f65c

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 22:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-25_6db68873ed602a4b2784d5e92bfe776c_agent-tesla_backswap_elex_stop.exe
Size 703KB
Sample260826-14fx2aff59
SHA256 96e8258a3c58b22efd4810c27384a98b12ca93801b9eb8afb44cae660508f65c
MD5 6db68873ed602a4b2784d5e92bfe776c
SHA1 143d79958aeee0c880fb89b6684b0afc5dcd6134
SHA512 ea7b128de97e1536b3a71fc679bb6c42d729b60f5a8ceff0562adf6fc0bb531ce3cac4bbce4cdeab0ea5f1ab9241c6313a16e88bd6ea3356c2d05a24949b0bd7
SSDEEP 12288:8aWzgMg7v3qnCikErQohh0F45CJ8lny9Qe/5tg19xSi:DaHMv6Csrj5ny9Qe/Eqi
TLSH
T190E4BF12B7D680B6D99338B5297BE32BEB3561194327C4C7A7E02F739F211509B3A361
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-25_6db68873ed602a4b2784d5e92bfe776c_agent-tesla_backswap_elex_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-25_6db68873ed602a4b2784d5e92bfe776c_agent-tesla_backswap_elex_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-25_6db68873ed602a4b2784d5e92bfe776c_agent-tesla_backswap_elex_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1812

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads