General
- Target 2026-08-08_bae6e011ba796ab8b847c7e9aa8bce1f_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample260808-g6tr5a1hpc
- SHA256 402844d42345d2a1e5021d1c26be6cd38ad0f08cb8c17d5e82ba1f4460ad6346
- MD5 bae6e011ba796ab8b847c7e9aa8bce1f
- SHA1 6a1f2a7ffd30429d9fa14363a5ef431dcd948974
- SHA512 061eb3f74e534e72d0556a23f8054f761cfb0644192cad6deaedbc05f7357de39e09c62807c0b335f50d677284c6a95b6e606cae0c274944550f55620d9b3045
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRde:01/kjtPlERDGnlRANRde
- TLSH T165757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_bae6e011ba796ab8b847c7e9aa8bce1f_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_bae6e011ba796ab8b847c7e9aa8bce1f_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 402844d42345d2a1e5021d1c26be6cd38ad0f08cb8c17d5e82ba1f4460ad6346
- MD5 bae6e011ba796ab8b847c7e9aa8bce1f
- SHA1 6a1f2a7ffd30429d9fa14363a5ef431dcd948974
- SHA512 061eb3f74e534e72d0556a23f8054f761cfb0644192cad6deaedbc05f7357de39e09c62807c0b335f50d677284c6a95b6e606cae0c274944550f55620d9b3045
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRde:01/kjtPlERDGnlRANRde
- TLSH T165757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.