General

  • Target
    2026-08-02_4d3fb1fc5c49c9c08f74785c7e6e0fa5_elex_emotet_glassworm_icedid_stop
  • Size 1.9MB
  • Sample260802-nv16dssbqd
  • SHA256 f5fe46701b04239f9f81cb5e85a10b6acb75d8647ddae4a0ad4f331e47181a20
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-08-02_4d3fb1fc5c49c9c08f74785c7e6e0fa5_elex_emotet_glassworm_icedid_stop
    .exe 1.9MB

2026-08-02_4d3fb1fc5c49c9c08f74785c7e6e0fa5_elex_emotet_glassworm_icedid_stop

  • IMPHASH 98c97c2a19b38ad2f84a480adf10aa55
  • SHA256 f5fe46701b04239f9f81cb5e85a10b6acb75d8647ddae4a0ad4f331e47181a20
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
23:61:06:4e:17:ce:f8:50:c1:a5:a7:83:5f:6d:ad:1a:9f:ad:f7:f0:ad:e3:e4:94:2e:66:09:af:2b:4d:f1:55
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Shanghai Oriental Webcasting Co. Ltd.,OU=IT,O=Shanghai Oriental Webcasting Co. Ltd.,L=Shanghai,ST=Shanghai,C=CN

PE Signature issue

Digest
9d:fc:cd:c9:8c:a5:58:6e:1e:d3:f7:82:fe:b9:71:51:e0:c1:56:10
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Shanghai Oriental Webcasting Co. Ltd.,OU=IT,O=Shanghai Oriental Webcasting Co. Ltd.,L=Shanghai,ST=Shanghai,C=CN
Minor OS version
0
Major OS version
4
Entry point
517389
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
d:\jenkins\workspace\srf_develop\ShuRuFa\程序\Trunk\Bin\pdbmap\WanNengWB\Tool32.pdb