2026-08-14_4c6c3afabcf926ffe98f0d46da0ccdc0_elex_emotet_floxif_icedid_sakula_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-14_4c6c3afabcf926ffe98f0d46da0ccdc0_elex_emotet_floxif_icedid_sakula_stop
Size 2.7MB
Sample260814-e5c2wacp8y
SHA256 63ff630f467cc27e2bb8bb303dea541212202d2b5bf372a8dd6a4dbb20b42edb
MD5 4c6c3afabcf926ffe98f0d46da0ccdc0
SHA1 2f6ccbb339f5a3561e4cc4e2cf58ee77afabcd7a
SHA512 3e76f847d56b863399d8cf817d22608e9e4d918c8420b34cb0e14fe8639958da2e0d368d75b94dbf0347a238ac2cea3de52d1112c24362f5a832473798b6d498
SSDEEP 24576:0uILm3xvdJcEy1LhIDfhTnFrWZjFWxsUfcdbovOEopayVrDkLXlaDrvgGyRiA/WG:x7CohTMZcxs1boGEopTDkIDps
TLSH
T15BD56C44738581B2D841777112C38F1D8AA8AF657F3953C7E7A83A6C9DB32C1B936B09
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-14_4c6c3afabcf926ffe98f0d46da0ccdc0_elex_emotet_floxif_icedid_sakula_stop

File Explorer

2026-08-14_4c6c3afabcf926ffe98f0d46da0ccdc0_elex_emotet_floxif_icedid_sakula_stop

.exe 2.7MB

2026-08-14_4c6c3afabcf926ffe98f0d46da0ccdc0_elex_emotet_floxif_icedid_sakula_stop

IMPHASH f2792e14ffb5b480115a16de007b4967
SHA256 63ff630f467cc27e2bb8bb303dea541212202d2b5bf372a8dd6a4dbb20b42edb
MD5 4c6c3afabcf926ffe98f0d46da0ccdc0
SHA1 2f6ccbb339f5a3561e4cc4e2cf58ee77afabcd7a
SHA512 3e76f847d56b863399d8cf817d22608e9e4d918c8420b34cb0e14fe8639958da2e0d368d75b94dbf0347a238ac2cea3de52d1112c24362f5a832473798b6d498
SSDEEP 24576:0uILm3xvdJcEy1LhIDfhTnFrWZjFWxsUfcdbovOEopayVrDkLXlaDrvgGyRiA/WG:x7CohTMZcxs1boGEopTDkIDps
TLSH
T15BD56C44738581B2D841777112C38F1D8AA8AF657F3953C7E7A83A6C9DB32C1B936B09
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

ab:90:12:d6:bc:ef:f9:0d:c3:a6:0f:e3:3f:ad:6d:d4:df:2a:18:5e:4d:aa:ea:2d:6a:54:be:8d:f4:54:ce:47

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=493 590 202,CN=CPUID S.A.R.L.U.,O=CPUID S.A.R.L.U.,L=Dunkerque,C=FR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024652

Chains

Apr 15, 2021

SERIALNUMBER=493 590 202,CN=CPUID S.A.R.L.U.,O=CPUID S.A.R.L.U.,L=Dunkerque,C=FR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024652

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

ca:92:da:79:da:85:dd:6b:24:d8:fb:ab:7f:56:12:7f:a6:59:7f:54

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=493 590 202,CN=CPUID S.A.R.L.U.,O=CPUID S.A.R.L.U.,L=Dunkerque,C=FR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024652

Chains

Apr 15, 2021

SERIALNUMBER=493 590 202,CN=CPUID S.A.R.L.U.,O=CPUID S.A.R.L.U.,L=Dunkerque,C=FR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024652

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=493 590 202,CN=CPUID S.A.R.L.U.,O=CPUID S.A.R.L.U.,L=Dunkerque,C=FR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024652

Serial Number

09:19:de:df:5f:a2:dc:75:a4:f8:19:9b:b6:90:c8:1e

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 12, 2020 - Sep 17, 2021

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=493 590 202,CN=CPUID S.A.R.L.U.,O=CPUID S.A.R.L.U.,L=Dunkerque,C=FR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024652

Serial Number

03:05:ec:13:8e:94:a1:db:6e:b7:dc:79:05:08:3f:04

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 14, 2018 - Sep 17, 2021

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

Major OS version

Entry point

1191763

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\cpuid\applications\HWMonitor\vc2008\Release\HWMonitor_x32.pdb

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

advapi32

AdjustTokenPrivileges RegDeleteValueW RegSetValueExW RegCreateKeyW RegCloseKey RegOpenKeyExW RegQueryValueW OpenProcessToken CloseServiceHandle CreateServiceW DeleteService OpenServiceA StartServiceA ControlService OpenSCManagerA RegQueryValueExA RegOpenKeyExA RegSetValueW RegQueryValueExW RegDeleteKeyW RegEnumKeyW RegOpenKeyW SetFileSecurityW GetFileSecurityW RegCreateKeyExW LookupPrivilegeValueA

kernel32

TlsGetValue EnterCriticalSection GlobalReAlloc GlobalHandle InitializeCriticalSection TlsAlloc TlsSetValue LocalReAlloc DeleteCriticalSection TlsFree GlobalFlags lstrlenA GetThreadLocale FileTimeToSystemTime SystemTimeToFileTime GetPrivateProfileIntW WritePrivateProfileStringW GetPrivateProfileStringW MoveFileW GetStringTypeExW lstrcmpiW FlushFileBuffers LockFile UnlockFile SetEndOfFile GetFileSize DuplicateHandle FindClose FindFirstFileW GetVolumeInformationW GetShortPathNameW CreateFileW FileTimeToLocalFileTime GetFileAttributesExW LocalFileTimeToFileTime GetFileSizeEx SetErrorMode GetStartupInfoW LeaveCriticalSection RtlUnwind HeapAlloc HeapReAlloc ExitProcess HeapSize SetUnhandledExceptionFilter GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate HeapDestroy VirtualFree GetTickCount GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter IsDebuggerPresent VirtualAlloc GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount GetTimeZoneInformation GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle GetLocaleInfoA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetEnvironmentVariableA InterlockedIncrement GetDiskFreeSpaceW GetFullPathNameW GetTempFileNameW GetFileTime SetFileTime ConvertDefaultLocale EnumResourceLanguagesW lstrcmpA GetLocaleInfoW CompareStringA InterlockedExchange GlobalGetAtomNameW GetCurrentProcessId FreeResource GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom CompareStringW lstrcmpW GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageW MulDiv CancelIo ResetEvent ReadFile CreateEventA GetOverlappedResult SetThreadAffinityMask ResumeThread QueryPerformanceFrequency GetCurrentThread GetPriorityClass SetPriorityClass GetThreadPriority QueryPerformanceCounter WriteConsoleA GlobalMemoryStatus GetDiskFreeSpaceA LocalAlloc LocalFree SetFilePointer CreateDirectoryA GetTempPathA GetModuleHandleA FindResourceA GetWindowsDirectoryA WriteFile DeleteFileA RemoveDirectoryA GetComputerNameA CreateFileA DeviceIoControl GetCurrentDirectoryA GetModuleFileNameA OpenMutexA CreateMutexA GetVersionExA GetCurrentProcess GetSystemInfo LoadLibraryA GetProcessHeap HeapFree WinExec lstrcatW lstrcpyW lstrlenW SetLastError DeleteFileW UnmapViewOfFile MapViewOfFile CreateFileMappingW SetCurrentDirectoryW SetThreadPriority ExitThread Sleep ReleaseMutex GetComputerNameW GetCurrentDirectoryW CreateMutexW GetModuleFileNameW GetModuleHandleW WaitForSingleObject CreateThread CloseHandle InterlockedDecrement LockResource LoadLibraryW FreeLibrary SizeofResource LoadResource FindResourceW GetProcAddress WideCharToMultiByte GetTempPathW GetFileAttributesW GetSystemWindowsDirectoryW GetVersionExW MultiByteToWideChar GetLastError RaiseException

user32

WindowFromPoint IsZoomed ShowOwnedPopups GetMessageW TranslateMessage GetCursorPos ValidateRect CreateDialogIndirectParamW GetNextDlgTabItem EndDialog PostQuitMessage UnpackDDElParam ReuseDDElParam LoadMenuW DestroyMenu GetActiveWindow ReleaseCapture LoadAcceleratorsW InsertMenuItemW CreatePopupMenu SetRectEmpty BringWindowToTop GetDesktopWindow TranslateAcceleratorW GetWindowThreadProcessId EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW FillRect SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuW EnableMenuItem CheckMenuItem IsWindowEnabled ShowWindow MoveWindow SetWindowTextW SetRect RegisterWindowMessageW LoadIconW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetFocus SetFocus GetWindowTextW GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageW BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageW MapWindowPoints TrackPopupMenu SetMenu SetScrollPos GetScrollPos SetForegroundWindow IsWindowVisible CharUpperW DestroyIcon UnregisterClassW DeleteMenu SystemParametersInfoW GetMenuItemInfoW LoadCursorW IsDialogMessageW GetSysColorBrush PostMessageW CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos SetScrollInfo GetDlgCtrlID DefWindowProcW CallWindowProcW GetMenu SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindow IsWindow GetMenuState GetMenuStringW GetMenuItemID InsertMenuW GetMenuItemCount GetSubMenu wsprintfA LoadImageW CreateCursor GetSystemMetrics SetCursor SetTimer InflateRect DrawFocusRect GetSysColor IsRectEmpty CopyRect KillTimer SetWindowLongW GetWindowRect LoadBitmapW MessageBoxW UpdateWindow InvalidateRect ReleaseDC GetDC GetParent SendMessageW PtInRect GetWindowLongW GetClientRect EnableWindow GetKeyState

gdi32

DeleteDC CreatePatternBrush GetTextMetricsW GetBkColor CreateSolidBrush ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutW TextOutW RectVisible PtVisible CreateCompatibleDC DeleteObject IntersectClipRect ExcludeClipRect SetMapMode SetBkMode RestoreDC SaveDC GetClipBox GetDeviceCaps CreateFontIndirectW GetStockObject SetBkColor SetTextColor GetPixel CreateBitmap GetObjectW CreateFontW GetTextExtentPoint32W BitBlt CreateCompatibleBitmap

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW ClosePrinter DocumentPropertiesW

shell32

DragFinish DragQueryFileW ExtractIconW SHGetFileInfoW ShellExecuteW

shlwapi

PathFindExtensionW PathFindFileNameW PathStripToRootW PathRemoveFileSpecW PathIsUNCW

ole32

CoTaskMemFree StringFromGUID2 CoInitializeEx CoInitializeSecurity CoSetProxyBlanket CoCreateInstance CoUninitialize

oleaut32

SysAllocString SysAllocStringByteLen SysStringByteLen SysFreeString VariantChangeType VariantClear VariantInit SysStringLen SysAllocStringLen SafeArrayGetElemsize SafeArrayGetElement SafeArrayGetVartype

winmm

timeGetTime

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-14_4c6c3afabcf926ffe98f0d46da0ccdc0_elex_emotet_floxif_icedid_sakula_stop

PE Signature issue

PE Signature issue

version

advapi32

kernel32

user32

gdi32

comdlg32

winspool.drv

shell32

shlwapi

ole32

oleaut32

winmm

generic