General
- Target 2026-08-08_09912266e2d00c2a58ac23906ed98c7d_elex_emotet_remcos_sality_stop
- Size 948KB
- Sample260808-p24qjade86
- SHA256 38ada50c235278d003e8d45d985a0a8e09a977ff929df23ececf045380477cc5
- MD5 09912266e2d00c2a58ac23906ed98c7d
- SHA1 9303f14c4ee8c9761093839710dd089845703b22
- SHA512 97ded43df7585eab478f038f528a5f008c2e3bd64363a06b1962d34fce1a524af450a87780ea80c70dfc5d1081f14d665572b0d23429a79e27c15b38e81abe9f
- SSDEEP 24576:05m5gL06E2JrsRjhm0Ijr/eax8JXO02q3A:cdE2JrEjhMjSax84
- TLSH T1D025E002B3D3E03AF5A301715E26972956BABF921F3396C77B803A1DDD706D29A35B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_09912266e2d00c2a58ac23906ed98c7d_elex_emotet_remcos_sality_stop.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_09912266e2d00c2a58ac23906ed98c7d_elex_emotet_remcos_sality_stop
- Size 948KB
- SHA256 38ada50c235278d003e8d45d985a0a8e09a977ff929df23ececf045380477cc5
- MD5 09912266e2d00c2a58ac23906ed98c7d
- SHA1 9303f14c4ee8c9761093839710dd089845703b22
- SHA512 97ded43df7585eab478f038f528a5f008c2e3bd64363a06b1962d34fce1a524af450a87780ea80c70dfc5d1081f14d665572b0d23429a79e27c15b38e81abe9f
- SSDEEP 24576:05m5gL06E2JrsRjhm0Ijr/eax8JXO02q3A:cdE2JrEjhMjSax84
- TLSH T1D025E002B3D3E03AF5A301715E26972956BABF921F3396C77B803A1DDD706D29A35B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1