Overview

overview

3

Static

static

1

2026-09-07...op.exe

windows10-2004-x64

3

2026-09-07...op.exe

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    148s
  • max time network
    116s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/09/2026, 22:45

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-09-07_7850296ecad8fdf0425f705fe0739177_elex_hijackloader_stop.exe
  • Size 2.3MB
  • Sample260908-2pshysytft
  • SHA256 21bd3e99e269f3c589e37f49d91bfc863acb431ee68afb8ccd337ce09d0cba6b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies registry class 6 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-09-07_7850296ecad8fdf0425f705fe0739177_elex_hijackloader_stop.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-09-07_7850296ecad8fdf0425f705fe0739177_elex_hijackloader_stop.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:5688

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Pulsefire_FPS_Pro_Gen2_V1.0.1.0_20200505.hex
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\FWFiles\Pulsefire_FPS_Pro_Gen2_V1.0.1.0_20200505.hex
        • Size 130KB
        • SHA256 6a9e779063833c01dfe5385094d314c9b4569835d66b51d6f439f75e11130f31
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Exit.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\Exit.bmp
        • Size 1KB
        • SHA256 a0ca4d639815f3dff0bd10de37b611bdd30b28c6035bbc6beed9d662556e8067
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Exit_mo.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\Exit_mo.bmp
        • Size 1KB
        • SHA256 8c19109da708d9375894dfdb29c9429cc178172008b824032fa11bb4dc72c185
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        background.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\background.bmp
        • Size 427KB
        • SHA256 191e3147e05cce6cfe4de87d80b14f3196391baef0b48f5c5d442e0308b6276b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        start_d.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\start_d.bmp
        • Size 6KB
        • SHA256 15ba056e75d171451fd63d10e5ef45b4a1ea39be55f8ae48acfd45fc6d4a0734
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        starting_mo.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\starting_mo.bmp
        • Size 6KB
        • SHA256 f76433b72706669ebace4900e15ce547cc605790fd45f311d75bce7fb4bedf05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UISettings.ini
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\UISettings.ini
        • Size 2KB
        • SHA256 9b6e62f4d524917d27f58da6df28052293ff3ee2645f117b862a054bb67d5777
        • MD5 SHA1 SHA512 TLSH
        Submit Download