General

  • Target
    2026-07-30_efc1677b5dd18d1cb4a21dc13002bf4c_elex_emotet_floxif_icedid_remcos
  • Size 3.7MB
  • Sample260730-r36bvsbb44
  • SHA256 50df0f125a1da092838a9bd4649290ae73a4831d4674e5275218785cebb166c1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-07-30_efc1677b5dd18d1cb4a21dc13002bf4c_elex_emotet_floxif_icedid_remcos
    .exe 3.7MB

2026-07-30_efc1677b5dd18d1cb4a21dc13002bf4c_elex_emotet_floxif_icedid_remcos

  • IMPHASH 301894227f74c269efeae70e03046123
  • SHA256 50df0f125a1da092838a9bd4649290ae73a4831d4674e5275218785cebb166c1
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers

  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
d7:2d:c9:6b:28:69:02:47:b4:bb:61:2e:83:12:bc:b2
Digest Algorithm
md5
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US
Chains

Jan 1, 0001

Minor OS version
0
Major OS version
4
Entry point
1822767
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths