General
- Target 2026-08-14_7ac9480874d46ed0274cbfe68a331e97_elex_hawkeye_icedid_remcos
- Size 2.7MB
- Sample260814-el3s7athrf
- SHA256 a22675785b6c56db2d7f5cc3c26bd8ead58d7402182e49cd0348bfdac3c5bb81
- MD5 7ac9480874d46ed0274cbfe68a331e97
- SHA1 2ca583a3c1a14bb032b94ed23deb83c93e13f273
- SHA512 c9a946a78e92f4783888950a0ef390478cad4f4f3ad4ad11af0cc51207f316b6f61147fb0bae05df3aff03272f5622303af4247d8ad45b0b09e9b5e9d859a2e2
- SSDEEP 49152:U+ES+ES+ES+E7+ES+ES+ES+EE9w5+ES+ES+ES+E7+ES+ES+ES+EE9wY4p67pbC:hvl7pG
- TLSH T122D52A05FAC64071E57B157049ABD27E4671BA11C523CE9FE6888ECEFBF2B905824732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_7ac9480874d46ed0274cbfe68a331e97_elex_hawkeye_icedid_remcos.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_7ac9480874d46ed0274cbfe68a331e97_elex_hawkeye_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_7ac9480874d46ed0274cbfe68a331e97_elex_hawkeye_icedid_remcos
- Size 2.7MB
- SHA256 a22675785b6c56db2d7f5cc3c26bd8ead58d7402182e49cd0348bfdac3c5bb81
- MD5 7ac9480874d46ed0274cbfe68a331e97
- SHA1 2ca583a3c1a14bb032b94ed23deb83c93e13f273
- SHA512 c9a946a78e92f4783888950a0ef390478cad4f4f3ad4ad11af0cc51207f316b6f61147fb0bae05df3aff03272f5622303af4247d8ad45b0b09e9b5e9d859a2e2
- SSDEEP 49152:U+ES+ES+ES+E7+ES+ES+ES+EE9w5+ES+ES+ES+E7+ES+ES+ES+EE9wY4p67pbC:hvl7pG
- TLSH T122D52A05FAC64071E57B157049ABD27E4671BA11C523CE9FE6888ECEFBF2B905824732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1