General
- Target 2026-04-26_6fb9e2f2d84a2c1b2b42f5ca82c4c1af_elex_emotet_icedid_remcos
- Size 868KB
- Sample260426-v2x6msgz3p
- SHA256 1742397fe2179813d86e0ccb481899ca8c71f0e26269a682e5b50c5768094c46
- MD5 6fb9e2f2d84a2c1b2b42f5ca82c4c1af
- SHA1 e2a94f1e30864e8cbc90764f71f69535af6e6a74
- SHA512 d611c219340606659fa9c7f23e7c7f5d3defa21b884e160ae23de4a1e82261550c1109aee86919af72ce238accedb6d0d69b58948f742fea5e1a66a012219ed3
- SSDEEP 12288:mFt1+YJ2VYMHq8GhDFQGFNrIyUNWPuLjZpzbf3yD8Jcjpy:mFt1LuqJhDqGFeyUQPurCD8Jcj0
- TLSH T10C158E13B6A291F5C204057019BF7737EA759B460A35CFC7A398DD2C7E332A0B626369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-26_6fb9e2f2d84a2c1b2b42f5ca82c4c1af_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-26_6fb9e2f2d84a2c1b2b42f5ca82c4c1af_elex_emotet_icedid_remcos.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-26_6fb9e2f2d84a2c1b2b42f5ca82c4c1af_elex_emotet_icedid_remcos
- Size 868KB
- SHA256 1742397fe2179813d86e0ccb481899ca8c71f0e26269a682e5b50c5768094c46
- MD5 6fb9e2f2d84a2c1b2b42f5ca82c4c1af
- SHA1 e2a94f1e30864e8cbc90764f71f69535af6e6a74
- SHA512 d611c219340606659fa9c7f23e7c7f5d3defa21b884e160ae23de4a1e82261550c1109aee86919af72ce238accedb6d0d69b58948f742fea5e1a66a012219ed3
- SSDEEP 12288:mFt1+YJ2VYMHq8GhDFQGFNrIyUNWPuLjZpzbf3yD8Jcjpy:mFt1LuqJhDqGFeyUQPurCD8Jcj0
- TLSH T10C158E13B6A291F5C204057019BF7737EA759B460A35CFC7A398DD2C7E332A0B626369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file