General
- Target 2026-07-21_c8fc44b15457b1a66268a96668497175_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample260721-t6bmrsce89
- SHA256 10de35e36279142518ab5187f8f9eb61eff0a48b715e0e5d5ebcb54a2aa56759
- MD5 c8fc44b15457b1a66268a96668497175
- SHA1 66b68827de3c49243d87eb73e5ab685384938a7d
- SHA512 f198cab2fe78202a43feb0247fd050c542ef54bf73d968f6c4fc8f2dee08a8c20f19cbee12b20bb5ffab893ce7d1dc2a8bc6dc4f1d48e3d372a92ca9c5a42c36
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRd6:01/kjtPlERDGnlRANRd6
- TLSH T147757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_c8fc44b15457b1a66268a96668497175_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_c8fc44b15457b1a66268a96668497175_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 10de35e36279142518ab5187f8f9eb61eff0a48b715e0e5d5ebcb54a2aa56759
- MD5 c8fc44b15457b1a66268a96668497175
- SHA1 66b68827de3c49243d87eb73e5ab685384938a7d
- SHA512 f198cab2fe78202a43feb0247fd050c542ef54bf73d968f6c4fc8f2dee08a8c20f19cbee12b20bb5ffab893ce7d1dc2a8bc6dc4f1d48e3d372a92ca9c5a42c36
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRd6:01/kjtPlERDGnlRANRd6
- TLSH T147757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.