General
- Target 2026-07-06_f0ab375ebb4cf1a580300c918f7ff42e_amadey_elex_emotet_remcos_smoke-loader_stop
- Size 1.7MB
- Sample260707-abeldsay5r
- SHA256 8160e6f22868a6415e25d06ac727483e7cbc1b53a51cc421263f7f16c63382d4
- MD5 f0ab375ebb4cf1a580300c918f7ff42e
- SHA1 822d0884e3f92ec629ed13ffd1f4e6fb6a551fc1
- SHA512 7e6d0952d73a4d92310a2e8e301a8c46c673d19ac613aa8cb2077b58b8db54e31143d8c3a1cfb5269b410983d72b5ca89f80c535f02c377cd222dabe025050aa
- SSDEEP 49152:bGXBMpaHgNYdFuDDNsz3LquRD/sLTRE7YE:bGXBy0dYDDNszJRD/sLT0J
- TLSH T17685CF62FAD3C677D2EB8336CBB2965859B2B804D4B4821F72C44A4DD9F2740A53DB13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_f0ab375ebb4cf1a580300c918f7ff42e_amadey_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_f0ab375ebb4cf1a580300c918f7ff42e_amadey_elex_emotet_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_f0ab375ebb4cf1a580300c918f7ff42e_amadey_elex_emotet_remcos_smoke-loader_stop
- Size 1.7MB
- SHA256 8160e6f22868a6415e25d06ac727483e7cbc1b53a51cc421263f7f16c63382d4
- MD5 f0ab375ebb4cf1a580300c918f7ff42e
- SHA1 822d0884e3f92ec629ed13ffd1f4e6fb6a551fc1
- SHA512 7e6d0952d73a4d92310a2e8e301a8c46c673d19ac613aa8cb2077b58b8db54e31143d8c3a1cfb5269b410983d72b5ca89f80c535f02c377cd222dabe025050aa
- SSDEEP 49152:bGXBMpaHgNYdFuDDNsz3LquRD/sLTRE7YE:bGXBy0dYDDNszJRD/sLT0J
- TLSH T17685CF62FAD3C677D2EB8336CBB2965859B2B804D4B4821F72C44A4DD9F2740A53DB13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.