General
- Target 2026-08-07_9f6182759768b12c6fff167cf1a4428a_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample260807-vst3maszft
- SHA256 281b96e20024708a7af01b269ae1c177565bfce6c1844ba501e9ef563a9eff4a
- MD5 9f6182759768b12c6fff167cf1a4428a
- SHA1 bc1a1df2d6b8fcff974108b9ac6d7a2ecaa533e5
- SHA512 44f344ec464cbd11836f0369cdb8a1712690c75b8efa9ac32e00c68cacc31198f7cc3a9dcbf5fd2113e23a8b10fbea320a9128782eaac54a51d291042c22b18d
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdC:01/kjtPlERDGnlRANRdC
- TLSH T1FB757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_9f6182759768b12c6fff167cf1a4428a_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_9f6182759768b12c6fff167cf1a4428a_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 281b96e20024708a7af01b269ae1c177565bfce6c1844ba501e9ef563a9eff4a
- MD5 9f6182759768b12c6fff167cf1a4428a
- SHA1 bc1a1df2d6b8fcff974108b9ac6d7a2ecaa533e5
- SHA512 44f344ec464cbd11836f0369cdb8a1712690c75b8efa9ac32e00c68cacc31198f7cc3a9dcbf5fd2113e23a8b10fbea320a9128782eaac54a51d291042c22b18d
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdC:01/kjtPlERDGnlRANRdC
- TLSH T1FB757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.