General
- Target 2026-07-31_5e7a3f48ebf63a6bd7cf3c193701cb3b_elex_emotet_hijackloader_icedid_stop
- Size 2.1MB
- Sample260731-3vmekaaf35
- SHA256 21bb010e0c40f424be19676cdb2d53f30fcd8925a793f9020c4e52d8aa3865bf
- MD5 5e7a3f48ebf63a6bd7cf3c193701cb3b
- SHA1 658a95b6fc96c78d07fb4680cd18d744fdae370e
- SHA512 27f1c4e43efe71938d7d564df25a85d97f7166f41554ea7bed6c613a94458490ba9b911238b4a95a17396742ab982f7227a731c8db657515556897e8099da2b7
- SSDEEP 49152:2HhkqgYa3/zb1vjaHAk8McldEyjhPEulOj:2G0aPNmHM/tdw
- TLSH T1F0A5BF9136A1C437DAA202F05B218BEC56F0BEE4DA36414BA3D2176D6E725C35B39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-31_5e7a3f48ebf63a6bd7cf3c193701cb3b_elex_emotet_hijackloader_icedid_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_5e7a3f48ebf63a6bd7cf3c193701cb3b_elex_emotet_hijackloader_icedid_stop.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_5e7a3f48ebf63a6bd7cf3c193701cb3b_elex_emotet_hijackloader_icedid_stop
- Size 2.1MB
- SHA256 21bb010e0c40f424be19676cdb2d53f30fcd8925a793f9020c4e52d8aa3865bf
- MD5 5e7a3f48ebf63a6bd7cf3c193701cb3b
- SHA1 658a95b6fc96c78d07fb4680cd18d744fdae370e
- SHA512 27f1c4e43efe71938d7d564df25a85d97f7166f41554ea7bed6c613a94458490ba9b911238b4a95a17396742ab982f7227a731c8db657515556897e8099da2b7
- SSDEEP 49152:2HhkqgYa3/zb1vjaHAk8McldEyjhPEulOj:2G0aPNmHM/tdw
- TLSH T1F0A5BF9136A1C437DAA202F05B218BEC56F0BEE4DA36414BA3D2176D6E725C35B39733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.