Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
11/10/2026, 22:29
General
- Target 2026-10-10_0537824f130e6f501f19830e5f39cfe6_elex_stop.exe
- Size 5.2MB
- Sample261011-2d82kaab65
- SHA256 214d87efd3c10b8d4dd145942d641033b9b0a5cff37e9e95b679b8ae3ccddb4a
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-10_0537824f130e6f501f19830e5f39cfe6_elex_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-10_0537824f130e6f501f19830e5f39cfe6_elex_stop.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2148-1-0x00000000029B0000-0x0000000002AC7000-memory.dmp
memory/2148-0-0x0000000074990000-0x000000007514C000-memory.dmp
memory/2148-4-0x00000000029B0000-0x0000000002AC7000-memory.dmp
memory/2148-47-0x0000000005180000-0x0000000005181000-memory.dmp
memory/2148-46-0x00000000051A0000-0x00000000051A1000-memory.dmp
memory/2148-45-0x00000000052B0000-0x00000000052B1000-memory.dmp
memory/2148-52-0x0000000005150000-0x0000000005151000-memory.dmp
memory/2148-51-0x0000000005140000-0x0000000005141000-memory.dmp
memory/2148-50-0x0000000002990000-0x0000000002991000-memory.dmp
memory/2148-49-0x0000000005250000-0x0000000005251000-memory.dmp
memory/2148-48-0x0000000005200000-0x0000000005201000-memory.dmp
memory/2148-44-0x00000000052A0000-0x00000000052A1000-memory.dmp
memory/2148-43-0x00000000052D0000-0x00000000052D1000-memory.dmp
memory/2148-42-0x0000000002B50000-0x0000000002B51000-memory.dmp
memory/2148-41-0x00000000051B0000-0x00000000051B1000-memory.dmp
memory/2148-40-0x00000000051C0000-0x00000000051C1000-memory.dmp
memory/2148-39-0x00000000051D0000-0x00000000051D1000-memory.dmp
memory/2148-38-0x0000000002970000-0x0000000002971000-memory.dmp
memory/2148-37-0x0000000005240000-0x0000000005241000-memory.dmp
memory/2148-36-0x0000000005290000-0x0000000005291000-memory.dmp
memory/2148-35-0x0000000005280000-0x0000000005281000-memory.dmp
memory/2148-34-0x00000000051F0000-0x00000000051F1000-memory.dmp
memory/2148-33-0x00000000051E0000-0x00000000051E1000-memory.dmp
memory/2148-32-0x0000000002B60000-0x0000000002B61000-memory.dmp
memory/2148-31-0x0000000002980000-0x0000000002981000-memory.dmp
memory/2148-30-0x00000000778A8000-0x00000000778A9000-memory.dmp
memory/2148-29-0x0000000005270000-0x0000000005271000-memory.dmp
memory/2148-25-0x0000000010000000-0x0000000010005000-memory.dmp
memory/2148-22-0x0000000010000000-0x0000000010005000-memory.dmp
memory/2148-19-0x0000000010000000-0x0000000010005000-memory.dmp
memory/2148-16-0x0000000010000000-0x0000000010005000-memory.dmp
memory/2148-14-0x0000000010000000-0x0000000010005000-memory.dmp
memory/2148-13-0x00000000026F0000-0x00000000026F1000-memory.dmp
memory/2148-3-0x00000000029B0000-0x0000000002AC7000-memory.dmp
memory/2148-2-0x00000000029B0000-0x0000000002AC7000-memory.dmp
memory/2148-53-0x0000000005210000-0x0000000005211000-memory.dmp
memory/2148-54-0x00000000029B0000-0x0000000002AC7000-memory.dmp