General
- Target 2026-07-08_8e93b0a3eff15a0264944d297f382d96_elex_emotet_icedid_redline-stealer_remcos_stop
- Size 2.3MB
- Sample260708-ncbssaex4t
- SHA256 39c11dc0e9279308e25fc9d609ea5e03eb529e60e7a471bc9f3b4f9b647361a7
- MD5 8e93b0a3eff15a0264944d297f382d96
- SHA1 d0262bce604538a4ceb4788ab540cca1f97240de
- SHA512 618c22f7be46412fff21ec768531e9a88e6d2c8e714469e6c51018801cbb4329ee1cc7217db00b1c21eaff4fcbc1f47b5be98455eb0bb91fc43cd27ec0308c10
- SSDEEP 49152:tHqz8ng7SNlAy7dxBulZobyYjEV9n91Glgyk6SZrMs:tKz8TLelKvjEV9XG2yH4
- TLSH T1D4B5F121B7D2C0F2C56719300867AB369A35BB570B35CBD36394DE695D332C1AE3728A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_8e93b0a3eff15a0264944d297f382d96_elex_emotet_icedid_redline-stealer_remcos_stop.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_8e93b0a3eff15a0264944d297f382d96_elex_emotet_icedid_redline-stealer_remcos_stop.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_8e93b0a3eff15a0264944d297f382d96_elex_emotet_icedid_redline-stealer_remcos_stop
- Size 2.3MB
- SHA256 39c11dc0e9279308e25fc9d609ea5e03eb529e60e7a471bc9f3b4f9b647361a7
- MD5 8e93b0a3eff15a0264944d297f382d96
- SHA1 d0262bce604538a4ceb4788ab540cca1f97240de
- SHA512 618c22f7be46412fff21ec768531e9a88e6d2c8e714469e6c51018801cbb4329ee1cc7217db00b1c21eaff4fcbc1f47b5be98455eb0bb91fc43cd27ec0308c10
- SSDEEP 49152:tHqz8ng7SNlAy7dxBulZobyYjEV9n91Glgyk6SZrMs:tKz8TLelKvjEV9XG2yH4
- TLSH T1D4B5F121B7D2C0F2C56719300867AB369A35BB570B35CBD36394DE695D332C1AE3728A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.