General
- Target 2026-07-23_6edb51ae48d2d2e2d59ba9d298254a15_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample260723-ry87ys1cna
- SHA256 97bff6d8dd900c0adf5ae731d11180665dba8b2028ce990be8c9e7eaece7ba55
- MD5 6edb51ae48d2d2e2d59ba9d298254a15
- SHA1 8a8b30646d44aca9f49c49fae921ae799efc3169
- SHA512 6b3894b9df5a28b345d6710c291fe9dac4d9e12c8fcda6a056b8813cd320583e3f3d041a977025b313d08ac39c4228675a61673b5a068588d61462e68427ceb1
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdl:01/kjtPlERDGnlRANRdl
- TLSH T1D9757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_6edb51ae48d2d2e2d59ba9d298254a15_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_6edb51ae48d2d2e2d59ba9d298254a15_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 97bff6d8dd900c0adf5ae731d11180665dba8b2028ce990be8c9e7eaece7ba55
- MD5 6edb51ae48d2d2e2d59ba9d298254a15
- SHA1 8a8b30646d44aca9f49c49fae921ae799efc3169
- SHA512 6b3894b9df5a28b345d6710c291fe9dac4d9e12c8fcda6a056b8813cd320583e3f3d041a977025b313d08ac39c4228675a61673b5a068588d61462e68427ceb1
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdl:01/kjtPlERDGnlRANRdl
- TLSH T1D9757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.