General
- Target 2026-07-20_8b1b92d6da444db5812ee08d5b02bcac_elex_emotet_glassworm_icedid_nymaim_remcos
- Size 2.2MB
- Sample260720-2q9hvsgs9m
- SHA256 bb5993082435517a84f426c8518112ca93d728c220d7249c5f2e042583e9cd33
- MD5 8b1b92d6da444db5812ee08d5b02bcac
- SHA1 6e2ad9cc55ba0ec1959f375755986aab8b1e8bbf
- SHA512 5ff77f5db70c8a203ab766d5e911c0380b2cb696d992e8e000d4cd36792bda4167d4f54632c90d141b07ad3b6b6de31c567756ace4f89e89a445f24989a25c68
- SSDEEP 24576:7Sc+HCLaN8Rd/4giQ5jzkyTgLu+NLBLjilPtkjeMH1JgLs1w9VfVJV18Jb9kVEcB:Ft5jYycBKtKGV/Vu7kVEcPr13
- TLSH T188B57D22F2D5C1A3D216263004B9677BB678BE568734DFDB5764EE1C18328C2AC3672D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-20_8b1b92d6da444db5812ee08d5b02bcac_elex_emotet_glassworm_icedid_nymaim_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_8b1b92d6da444db5812ee08d5b02bcac_elex_emotet_glassworm_icedid_nymaim_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_8b1b92d6da444db5812ee08d5b02bcac_elex_emotet_glassworm_icedid_nymaim_remcos
- Size 2.2MB
- SHA256 bb5993082435517a84f426c8518112ca93d728c220d7249c5f2e042583e9cd33
- MD5 8b1b92d6da444db5812ee08d5b02bcac
- SHA1 6e2ad9cc55ba0ec1959f375755986aab8b1e8bbf
- SHA512 5ff77f5db70c8a203ab766d5e911c0380b2cb696d992e8e000d4cd36792bda4167d4f54632c90d141b07ad3b6b6de31c567756ace4f89e89a445f24989a25c68
- SSDEEP 24576:7Sc+HCLaN8Rd/4giQ5jzkyTgLu+NLBLjilPtkjeMH1JgLs1w9VfVJV18Jb9kVEcB:Ft5jYycBKtKGV/Vu7kVEcPr13
- TLSH T188B57D22F2D5C1A3D216263004B9677BB678BE568734DFDB5764EE1C18328C2AC3672D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.