General
- Target 2026-08-09_e8fda19ffe2f75b067e803137ed30d5a_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample260809-1js2vswdpd
- SHA256 dab301a577ecf0836ce589ed20771744f84f161283863dcd4d698e3d26b00e5b
- MD5 e8fda19ffe2f75b067e803137ed30d5a
- SHA1 dd41d113b3721575dab01479e9464ec4bff78819
- SHA512 b6aba075965fa6670ad81529834e4e9b8d048c8046b7aa034c5354ed0ae8cf29b96f23a0cb980623cf4b5920d601214d63afb1057a16c7b48ba0c86b5fd872c6
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRd1:01/kjtPlERDGnlRANRd1
- TLSH T147757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_e8fda19ffe2f75b067e803137ed30d5a_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_e8fda19ffe2f75b067e803137ed30d5a_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_e8fda19ffe2f75b067e803137ed30d5a_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 dab301a577ecf0836ce589ed20771744f84f161283863dcd4d698e3d26b00e5b
- MD5 e8fda19ffe2f75b067e803137ed30d5a
- SHA1 dd41d113b3721575dab01479e9464ec4bff78819
- SHA512 b6aba075965fa6670ad81529834e4e9b8d048c8046b7aa034c5354ed0ae8cf29b96f23a0cb980623cf4b5920d601214d63afb1057a16c7b48ba0c86b5fd872c6
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRd1:01/kjtPlERDGnlRANRd1
- TLSH T147757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1