General
- Target 2026-07-21_7f83b089619af221d3a8bc59334bb2a8_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample260721-vlmd7sch45
- SHA256 0899fab2a6c12bffb8ca8db11ff5e7f4c6cb1ffce013f7a0f916f786bdbcdd98
- MD5 7f83b089619af221d3a8bc59334bb2a8
- SHA1 f2a6e488792de31d1872890ebd9712cd6dbcdf9d
- SHA512 7ccefb61d2da327079fb2c2bca6cf598da9ce6ed2c0bc0714b2dfbb783153e69d818962aa48fa24faee09a5e7b96f2023d8687620c6c43b2d7478cd546038800
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdQ:01/kjtPlERDGnlRANRdQ
- TLSH T1BF757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_7f83b089619af221d3a8bc59334bb2a8_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_7f83b089619af221d3a8bc59334bb2a8_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 0899fab2a6c12bffb8ca8db11ff5e7f4c6cb1ffce013f7a0f916f786bdbcdd98
- MD5 7f83b089619af221d3a8bc59334bb2a8
- SHA1 f2a6e488792de31d1872890ebd9712cd6dbcdf9d
- SHA512 7ccefb61d2da327079fb2c2bca6cf598da9ce6ed2c0bc0714b2dfbb783153e69d818962aa48fa24faee09a5e7b96f2023d8687620c6c43b2d7478cd546038800
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdQ:01/kjtPlERDGnlRANRdQ
- TLSH T1BF757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1