General
- Target 2026-07-11_b5e2c9c9c6a795232fac7a2b680db095_elex_emotet_icedid_remcos
- Size 3.7MB
- Sample260711-prphvsct3y
- SHA256 8487e549d7229591c4c52f4aeff19a4104b3a23a44dad1be27e152c6bc31b311
- MD5 b5e2c9c9c6a795232fac7a2b680db095
- SHA1 cde8d5d2c90246eeb8b4ca8d65e240f528b2b1d5
- SHA512 c4c42486724599e80552f09d8b9eabe3d638e07d96bb03700a1d73a50699de230bdf15ede93493143b1a6ac99ffba664486eced1429219d43f50379aea521cd7
- SSDEEP 49152:4972AlA4roDFpgoB/P7Hi3F1ywWO4HjMPyUXdPB8vb17n8TU6:497plrroDzgoBP7CV1ywodkdPmRb8TR
- TLSH T1EE068D037E8D903ED65D11305B696F759279AD843B201BC37275FE3CEC32391A9A722A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-11_b5e2c9c9c6a795232fac7a2b680db095_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_b5e2c9c9c6a795232fac7a2b680db095_elex_emotet_icedid_remcos
- Size 3.7MB
- SHA256 8487e549d7229591c4c52f4aeff19a4104b3a23a44dad1be27e152c6bc31b311
- MD5 b5e2c9c9c6a795232fac7a2b680db095
- SHA1 cde8d5d2c90246eeb8b4ca8d65e240f528b2b1d5
- SHA512 c4c42486724599e80552f09d8b9eabe3d638e07d96bb03700a1d73a50699de230bdf15ede93493143b1a6ac99ffba664486eced1429219d43f50379aea521cd7
- SSDEEP 49152:4972AlA4roDFpgoB/P7Hi3F1ywWO4HjMPyUXdPB8vb17n8TU6:497plrroDzgoBP7CV1ywodkdPmRb8TR
- TLSH T1EE068D037E8D903ED65D11305B696F759279AD843B201BC37275FE3CEC32391A9A722A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks whether UAC is enabled