Analysis
- max time kernel
150s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/09/2026, 01:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_f20b593bfa24795b5cc9e528704cce73_elex.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_f20b593bfa24795b5cc9e528704cce73_elex.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-09-08_f20b593bfa24795b5cc9e528704cce73_elex.exe
- Size 1.6MB
- Sample260910-b5j9eacm3z
- SHA256 7dc0a5e9083e9f12a7ab4340bb653b6891b5822be356ee53e2104c2c91107801
- MD5 f20b593bfa24795b5cc9e528704cce73
- SHA1 ba4f2a8d912024c3f8e49464dee0ca2056677c99
- SHA512 2424a997ba2ec9aa80a7ff62fa5a032aaea739d6142b3eca374339f09d1b2e4cb003f0a7d6396ad31e96cc04645dae5f9b88a4ee622ce76cc3e7f7537fc025db
- SSDEEP 24576:4Ov+L5K6v5LjymAAW0Gqxyy+ZMgZZgrluRMMH5reFiLRz3h3VuQ55MtbK:nlGLjXWa3+1Zy25rnMtbK
- TLSH T172854A42E6CB4CF2C99A17B454F7537A13389FA09915CF57AA0CF532BEA39C4B889311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000\Software\Microsoft\Windows\CurrentVersion\Run\DailySchedule = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-09-08_f20b593bfa24795b5cc9e528704cce73_elex.exe" 2026-09-08_f20b593bfa24795b5cc9e528704cce73_elex.exe - System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-08_f20b593bfa24795b5cc9e528704cce73_elex.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-08_f20b593bfa24795b5cc9e528704cce73_elex.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-08_f20b593bfa24795b5cc9e528704cce73_elex.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-08_f20b593bfa24795b5cc9e528704cce73_elex.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
PID:5804
-
C:\Users\Admin\AppData\Local\Temp\2026-09-08_f20b593bfa24795b5cc9e528704cce73_elex.exeC:\Users\Admin\AppData\Local\Temp\2026-09-08_f20b593bfa24795b5cc9e528704cce73_elex.exe1⤵
- System Location Discovery: System Language Discovery
PID:1992
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\schedule.ini
- Size 1KB
- SHA256 66ec0f07c0a1a65e7cd49a3a1129532f15654ad16aa0680816699f266b998620
- MD5 83e6f2ee3641b6097e9fa45877ce2c97
- SHA1 ae67d18e66d0de3a9fdbae8aeea74ca7756d49a5
- SHA512 56d3f61f96ae8da7c42dc11bd51eab451ede8ceaf7746b03fdae10808119b29b0aa82bc5dc59a427e5f80e3a941e89e3cac0678ff2cf4c68d16aa5445ded7e18
- TLSH T10731E6964B070EAC75330924D87203BF9AC71FF215A5A7FBAAF74C1B79810BE535844A
- MD5 SHA1 SHA512 TLSH