General
- Target 2026-08-08_855fcb333c5004e6c43c461f4662080d_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample260808-g8658ssaja
- SHA256 0cfdac52cf814c42df804aa8c52f3104996a6df04643236aadf6b6fcac503b04
- MD5 855fcb333c5004e6c43c461f4662080d
- SHA1 baf04f344207df7569e294cb0bc84b7d7937bfd8
- SHA512 576af48ada08aeec8bcfad7879053274baec2b74d08d48f546778fccd7fcdef3d4e025e38a0927e3eec0716c25a9d8829058eb4d701817da921d905c9e62ff2e
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdx:01/kjtPlERDGnlRANRdx
- TLSH T1A7757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_855fcb333c5004e6c43c461f4662080d_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_855fcb333c5004e6c43c461f4662080d_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 0cfdac52cf814c42df804aa8c52f3104996a6df04643236aadf6b6fcac503b04
- MD5 855fcb333c5004e6c43c461f4662080d
- SHA1 baf04f344207df7569e294cb0bc84b7d7937bfd8
- SHA512 576af48ada08aeec8bcfad7879053274baec2b74d08d48f546778fccd7fcdef3d4e025e38a0927e3eec0716c25a9d8829058eb4d701817da921d905c9e62ff2e
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdx:01/kjtPlERDGnlRANRdx
- TLSH T1A7757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1