General
- Target 2026-07-30_3d5cb9c2fbebaa605be35f446e86ca43_elex_emotet_remcos_stealc_stop
- Size 1.7MB
- Sample260730-kwmslsvcjd
- SHA256 d452da5cac08a04a073a4035885b90b9a7e2674e9ebbdcb0d9f8ab12b33c94d0
- MD5 3d5cb9c2fbebaa605be35f446e86ca43
- SHA1 4f45c7348ff7a83ca27061cf4cc6361c1634a508
- SHA512 a85a575fb1f76d7899ffe0ec0eb42ecb39b14b986cc3be17cd8485c2faef7f24c218d25ed752683b10e1ec6c58a61f985fd39ea44b794f193911df64510d3d84
- SSDEEP 24576:hy3rJD1Ub0co7nQ/tbw/2Mkjy6Fr7g0oP:IdDy5o7Q/lFTjN4
- TLSH T1D385011571D9D832EE63267009E3C335A76B7C139A71478FAB583A0D19FEB930A353A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_3d5cb9c2fbebaa605be35f446e86ca43_elex_emotet_remcos_stealc_stop.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_3d5cb9c2fbebaa605be35f446e86ca43_elex_emotet_remcos_stealc_stop
- Size 1.7MB
- SHA256 d452da5cac08a04a073a4035885b90b9a7e2674e9ebbdcb0d9f8ab12b33c94d0
- MD5 3d5cb9c2fbebaa605be35f446e86ca43
- SHA1 4f45c7348ff7a83ca27061cf4cc6361c1634a508
- SHA512 a85a575fb1f76d7899ffe0ec0eb42ecb39b14b986cc3be17cd8485c2faef7f24c218d25ed752683b10e1ec6c58a61f985fd39ea44b794f193911df64510d3d84
- SSDEEP 24576:hy3rJD1Ub0co7nQ/tbw/2Mkjy6Fr7g0oP:IdDy5o7Q/lFTjN4
- TLSH T1D385011571D9D832EE63267009E3C335A76B7C139A71478FAB583A0D19FEB930A353A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1