Analysis
- max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
11/08/2026, 06:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_8c6105f1fc02bfd85d1c919dafd08eef_elex_emotet_icedid.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_8c6105f1fc02bfd85d1c919dafd08eef_elex_emotet_icedid.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
General
- Target 2026-08-11_8c6105f1fc02bfd85d1c919dafd08eef_elex_emotet_icedid.exe
- Size 415KB
- Sample260811-hmv2hsda82
- SHA256 f77d005c76c69b2dcb864530c0383f75e1e121129f5e8b805e69b1565ee840de
- MD5 8c6105f1fc02bfd85d1c919dafd08eef
- SHA1 55500287650d25faff054211bb508af166721dfd
- SHA512 42cb6d4c7a80ae1775c0063bcd257bf6e4aec0c368b0853cde52f5db524e1693968eb94005f359953119c644a417631dae53ea1abf6c3617dfa2c053075092d1
- SSDEEP 12288:SplrVbDdQaqdS/ofraFErH8uB2Wm0SXsPr5FU:exRQ+Fucuvm0as
- TLSH T157947C12B7B0E170D6C311398F13AB7675EAEFA52B61E7C723803A4D9935AC1653930B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 4504 Panel.exe - Drops file in Program Files directory 1 IoCs
description ioc Process File created C:\Program Files\accordingly\Panel.exe 2026-08-11_8c6105f1fc02bfd85d1c919dafd08eef_elex_emotet_icedid.exe - System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-11_8c6105f1fc02bfd85d1c919dafd08eef_elex_emotet_icedid.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Panel.exe - Suspicious use of SetWindowsHookEx 8 IoCs
pid Process 3716 2026-08-11_8c6105f1fc02bfd85d1c919dafd08eef_elex_emotet_icedid.exe 3716 2026-08-11_8c6105f1fc02bfd85d1c919dafd08eef_elex_emotet_icedid.exe 3716 2026-08-11_8c6105f1fc02bfd85d1c919dafd08eef_elex_emotet_icedid.exe 3716 2026-08-11_8c6105f1fc02bfd85d1c919dafd08eef_elex_emotet_icedid.exe 4504 Panel.exe 4504 Panel.exe 4504 Panel.exe 4504 Panel.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 3716 wrote to memory of 4504 3716 2026-08-11_8c6105f1fc02bfd85d1c919dafd08eef_elex_emotet_icedid.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-11_8c6105f1fc02bfd85d1c919dafd08eef_elex_emotet_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-11_8c6105f1fc02bfd85d1c919dafd08eef_elex_emotet_icedid.exe"1⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3716 -
C:\Program Files\accordingly\Panel.exe"C:\Program Files\accordingly\Panel.exe" "33201"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4504
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\accordingly\Panel.exe
- Size 415KB
- SHA256 0ef8fa6bf3780938aa75e406f92db7ab7e994c6c27fe4108db0f1a84dca3e925
- MD5 2c55ecef8f63673d5ad3953f13c98fcf
- SHA1 b9c6328a214d69a738def3d80f6e88efca0529aa
- SHA512 6e0f789c4fd719c1282756d71f4adde8f3087eb8b50a042587c3d8a1491d1b6e843a88ef61634000cc882a840f1c0fa718b6f7200a7d58d4923455bf0cf86dfa
- SSDEEP 12288:aplrVbDdQaqdS/ofraFErH8uB2Wm0SXsPr5FU:2xRQ+Fucuvm0as
- TLSH T123947C12B7B0E170D6C311398F13AB7675EAEFA52B61E7C723803A4D9935AC1653930B
- MD5 SHA1 SHA512 SSDEEP TLSH