General
- Target 2026-08-10_5fc6b454bf02142f7860fabc1998ea83_amadey_elex_emotet_icedid_remcos_smoke-loader_stop
- Size 15.8MB
- Sample260810-q7da7sge99
- SHA256 6d8c689f9035de09fe3e9f9b363882feb4fcabf849871e1a6ecfe6d60d2cdb1a
- MD5 5fc6b454bf02142f7860fabc1998ea83
- SHA1 69ab044f6686b83c6695e307c9cbdbbfe2af4b11
- SHA512 3d5f0dfb2f2c77d5601f976e84267a7c7abdf8a5a2449d1edd0f93281562db2f91b541a678d413e05e92f59b1f948987e001e4bf56785bca917aba16321dc4dc
- SSDEEP 196608:cJsHfueFT3Ymt2yOZTHaxRWcUC9QSRnbD1F8f+T2vDOaPt3:nFTomtIuRWcUCySRP1Kk2vDl3
- TLSH T1D4F68C11A7FA4259F2F36F70E9B952564A77BDA2AE38C18F0244351D1C30AD0DAB5B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_5fc6b454bf02142f7860fabc1998ea83_amadey_elex_emotet_icedid_remcos_smoke-loader_stop.exe
Resource
win10ltsc2021-20260513-en
23 signatures
150 seconds
Malware Config
Extracted
Family
-
sality
C2
-
http://89.119.67.154/testo5/
-
http://kukutrustnet777.info/home.gif
-
http://kukutrustnet888.info/home.gif
-
http://kukutrustnet987.info/home.gif
-
http://www.klkjwre9fqwieluoi.info/
-
http://kukutrustnet777888.info/
Targets
-
- Target 2026-08-10_5fc6b454bf02142f7860fabc1998ea83_amadey_elex_emotet_icedid_remcos_smoke-loader_stop
- Size 15.8MB
- SHA256 6d8c689f9035de09fe3e9f9b363882feb4fcabf849871e1a6ecfe6d60d2cdb1a
- MD5 5fc6b454bf02142f7860fabc1998ea83
- SHA1 69ab044f6686b83c6695e307c9cbdbbfe2af4b11
- SHA512 3d5f0dfb2f2c77d5601f976e84267a7c7abdf8a5a2449d1edd0f93281562db2f91b541a678d413e05e92f59b1f948987e001e4bf56785bca917aba16321dc4dc
- SSDEEP 196608:cJsHfueFT3Ymt2yOZTHaxRWcUC9QSRnbD1F8f+T2vDOaPt3:nFTomtIuRWcUCySRP1Kk2vDl3
- TLSH T1D4F68C11A7FA4259F2F36F70E9B952564A77BDA2AE38C18F0244351D1C30AD0DAB5B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies firewall policy service
-
UAC bypass
-
Windows security bypass
-
Windows security modification
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
4Disable or Modify System Firewall
1Disable or Modify Tools
3Modify Registry
5