Analysis
- max time kernel
150s - max time network
154s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
09/08/2026, 18:46
General
- Target 2026-08-09_1d6a21e51208587622e410d220bf1982_amadey_elex_emotet_icedid_remcos_smoke-loader_vidar.exe
- Size 14.0MB
- Sample260809-xeszhsteqf
- SHA256 a1353f815c0f7d8c4db482ea15ca1de63d09f6ebb5ec754ad6eb08ba98c7ae69
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-09_1d6a21e51208587622e410d220bf1982_amadey_elex_emotet_icedid_remcos_smoke-loader_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-09_1d6a21e51208587622e410d220bf1982_amadey_elex_emotet_icedid_remcos_smoke-loader_vidar.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5716-12-0x00000000031B0000-0x00000000031B1000-memory.dmp
memory/5716-16-0x00000000031F0000-0x00000000031F1000-memory.dmp
memory/5716-17-0x0000000000FC1000-0x0000000000FC2000-memory.dmp
memory/5716-18-0x0000000003300000-0x0000000003503000-memory.dmp
memory/5716-15-0x00000000031E0000-0x00000000031E1000-memory.dmp
memory/5716-14-0x00000000031D0000-0x00000000031D1000-memory.dmp
memory/5716-13-0x00000000031C0000-0x00000000031C1000-memory.dmp
memory/5716-11-0x00000000031A0000-0x00000000031A1000-memory.dmp
memory/5716-23-0x0000000003300000-0x0000000003503000-memory.dmp
memory/5716-24-0x0000000003300000-0x0000000003503000-memory.dmp
memory/5716-10-0x0000000003190000-0x0000000003191000-memory.dmp
memory/5716-7-0x0000000003160000-0x0000000003161000-memory.dmp
memory/5716-6-0x0000000003150000-0x0000000003151000-memory.dmp
memory/5716-3-0x0000000003000000-0x0000000003001000-memory.dmp
memory/5716-2-0x0000000002FF0000-0x0000000002FF1000-memory.dmp
memory/5716-0-0x0000000002FA0000-0x0000000002FA1000-memory.dmp
memory/5716-9-0x0000000003180000-0x0000000003181000-memory.dmp
memory/5716-5-0x0000000003130000-0x0000000003131000-memory.dmp
memory/5716-8-0x0000000003170000-0x0000000003171000-memory.dmp
memory/5716-4-0x0000000003120000-0x0000000003121000-memory.dmp
memory/5716-1-0x0000000002FE0000-0x0000000002FE1000-memory.dmp
memory/5716-25-0x0000000000400000-0x0000000001228000-memory.dmp