General
- Target 2026-06-04_52b388904c3e4288d06266e867759f82_amadey_elex_emotet_glassworm_icedid_remcos_smoke-loader_stop
- Size 3.6MB
- Sample260604-nyd52adw2s
- SHA256 60e78c511360babbe7e25193545d8c5df5aac020bc14046d3021746c71f5e8c0
- MD5 52b388904c3e4288d06266e867759f82
- SHA1 1bfb56eebb2a96a70be0376f024a83ffff793663
- SHA512 2edf37e9612be62f05faf16bb2dc8b33aa4e6ea2a3015b6c3de9c643a3e60a8ece42627c19d64bd990df2c0de42e1b9fa713ccd5cfd3b9e9367b38129790a989
- SSDEEP 98304:ZDqNYtd6QWoHo2Ko0rbR2pdw3M8BRcGBVH536:Ld/I80h2pd4M8BRtBV
- TLSH T120060201B7C6C0B6D7261A3004A6D7359E35AF451A21C78BA7E8FE3AAD331919B3734D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_52b388904c3e4288d06266e867759f82_amadey_elex_emotet_glassworm_icedid_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_52b388904c3e4288d06266e867759f82_amadey_elex_emotet_glassworm_icedid_remcos_smoke-loader_stop.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_52b388904c3e4288d06266e867759f82_amadey_elex_emotet_glassworm_icedid_remcos_smoke-loader_stop
- Size 3.6MB
- SHA256 60e78c511360babbe7e25193545d8c5df5aac020bc14046d3021746c71f5e8c0
- MD5 52b388904c3e4288d06266e867759f82
- SHA1 1bfb56eebb2a96a70be0376f024a83ffff793663
- SHA512 2edf37e9612be62f05faf16bb2dc8b33aa4e6ea2a3015b6c3de9c643a3e60a8ece42627c19d64bd990df2c0de42e1b9fa713ccd5cfd3b9e9367b38129790a989
- SSDEEP 98304:ZDqNYtd6QWoHo2Ko0rbR2pdw3M8BRcGBVH536:Ld/I80h2pd4M8BRtBV
- TLSH T120060201B7C6C0B6D7261A3004A6D7359E35AF451A21C78BA7E8FE3AAD331919B3734D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Drops file in System32 directory