General

  • Target
    2026-07-11_b5e2c9c9c6a795232fac7a2b680db095_elex_emotet_icedid_remcos
  • Size 3.7MB
  • Sample260711-prphvsct3y
  • SHA256 8487e549d7229591c4c52f4aeff19a4104b3a23a44dad1be27e152c6bc31b311
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-07-11_b5e2c9c9c6a795232fac7a2b680db095_elex_emotet_icedid_remcos
    .exe 3.7MB

2026-07-11_b5e2c9c9c6a795232fac7a2b680db095_elex_emotet_icedid_remcos

  • IMPHASH 89751cce385001d6527c01a26b502ca5
  • SHA256 8487e549d7229591c4c52f4aeff19a4104b3a23a44dad1be27e152c6bc31b311
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers

  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
62:ad:d9:61:0b:83:dd:78:db:99:75:67:d2:c6:93:ff
Digest Algorithm
md5
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US
Chains

Jan 1, 0001

Minor OS version
0
Major OS version
4
Entry point
1863839
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths