Analysis
- max time kernel
148s - max time network
124s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/11/2026, 22:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe
- Size 294KB
- Sample261104-18dngaf17p
- SHA256 dd2645a787656eecea30acd043e8a5153a7b1f532cf5fcf0d1b9cee519fa2ed9
- MD5 445bd4f0bb029aa45a992cc93c80fb91
- SHA1 b9608ad3a104e5d64e785d10e2c41e04f5beaa4d
- SHA512 6e364a39e329aa20fc13e0a5155018b8215436e56ead192cece0f5dbb8d84715a64541c8ddcece8fe190d739f17a51a76add6a2ea201dbc1867de8aa2c0a87f8
- SSDEEP 6144:zd/xEeB0nW0Hacnt5VqjN0NvvAz84pjDkC2r0HJ:5/n0HLLzNvvApJHJ
- TLSH T17B543A17E29608FCC62BC1714796A773B932BC260230EE3B2794D7352F62D60A76D725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Internet Explorer\fr-FR\iexplore.exe.mui 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javap.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Java\jdk-1.8\bin\wsgen.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Microsoft Office\root\fre\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\wsgen.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\hu-HU\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Java\jre-1.8\bin\tnameserv.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pl\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Java\jdk-1.8\bin\javap.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\servertool.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Java\jre-1.8\bin\tnameserv.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Java\jre-1.8\legal\javafx\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Common Files\microsoft shared\ink\hu-HU\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Common Files\microsoft shared\ink\pl-PL\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\pl-PL\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\servertool.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\tnameserv.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Microsoft Office\Office16\OSPPREARM.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Java\jdk-1.8\bin\servertool.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Microsoft Office\Office16\OSPPREARM.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Microsoft Office\root\Office16\Graph.exe.maniftmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Common Files\microsoft shared\ink\vi-VN\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javap.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Java\jdk-1.8\bin\wsgen.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ca-ES-valencia\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pl\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Java\jdk-1.8\bin\servertool.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Java\jdk-1.8\bin\wsimport.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Java\jdk-1.8\jre\lib\security\policy\unlimited\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\lib\security\policy\unlimited\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Java\jre-1.8\legal\javafx\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\gd-GB\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Internet Explorer\fr-FR\iexplore.exe.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Java\jdk-1.8\bin\javap.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\lib\cmm\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\Graph.exe.maniftmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\wsimport.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Common Files\microsoft shared\ink\gd-GB\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\vi-VN\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Java\jdk-1.8\bin\wsimport.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Java\jdk-1.8\jre\lib\cmm\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Microsoft Office\Office16\OSPPREARM.EXE 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fi-FI\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\wsgen.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\tnameserv.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Microsoft Office\Office16\OSPPREARM.EXE 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\Graph.exe.manifest 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Microsoft Office\root\Office16\Graph.exe.manifest 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Internet Explorer\fr-FR\iexplore.exe.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Internet Explorer\fr-FR\iexplore.exe.mui 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Java\jdk-1.8\jre\lib\security\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Microsoft Office\root\fre\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File created C:\Program Files\Common Files\microsoft shared\ink\ca-ES-valencia\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\wsimport.tmp 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4892 2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe"C:\Users\Admin\AppData\Local\Temp\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.exe"1⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4892
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\2026-11-03_445bd4f0bb029aa45a992cc93c80fb91_conti_elex.ecle
- Size 32KB
- SHA256 c9ca38510065c9453a6b7396d0a1c0247215c4567ed958f740b2b474722077fd
- MD5 f233b757cb4625a10e7f99c3283899cd
- SHA1 f4feca56e9f52611e543b013d0d0d102cf3a3b3b
- SHA512 0f2957528e5ba016bfeb4153b671fe0258ff0137522cd9e678087e4cffd6d78bd8645b6da0945a0df2b289517f42b7454b5e6debcfc7631835b9550e54cf39f7
- SSDEEP 384:fyDBQVcNEbmCXaQ4x/VC0TSz0gCaNwKdtpFIdUXJ/nCyEUGh6JD004R+i7:fytQ7bzb0vgCa2Kdtp2dUXFCvEpQIm
- TLSH T17AE27422F54C8476F215C6F2296996A674263D310A90CD1BA789BF2D2EB40D3B8F071F
- MD5 SHA1 SHA512 SSDEEP TLSH