General
- Target 2026-08-16_0663cfb5d9185219d2c2988b90547752_elex_emotet_nymaim_remcos_wannacry
- Size 3.8MB
- Sample260816-swkbgsec48
- SHA256 0d5b89f188614d7b0130e9a7613a3129df0f10f7f214efc00bd235e72f334faf
- MD5 0663cfb5d9185219d2c2988b90547752
- SHA1 a1f4df39ffc57803c332f700790ac46032cf2fc3
- SHA512 d0b77c22d40fe3244ca7ce0d2d81da70b33242bc4388406f7786a5eb621426f82fd0c7b5e6ef78bed37e5726e4683276c99352da044746dc21c47612e95b1352
- SSDEEP 98304:ISTK7pn7unTIKUN6XhASerpnKHZWfnPa+azUgXyinCspxZV9EJBiadm9YMa/YkQM:ISYSeRKHZWfnPa+azUgXLnRpxhELiadV
- TLSH T195063921BB0A480AF1B345355D1DA7974260BA3C232150C3F7D87F2AA5F25DE69F8E27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_0663cfb5d9185219d2c2988b90547752_elex_emotet_nymaim_remcos_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_0663cfb5d9185219d2c2988b90547752_elex_emotet_nymaim_remcos_wannacry.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_0663cfb5d9185219d2c2988b90547752_elex_emotet_nymaim_remcos_wannacry
- Size 3.8MB
- SHA256 0d5b89f188614d7b0130e9a7613a3129df0f10f7f214efc00bd235e72f334faf
- MD5 0663cfb5d9185219d2c2988b90547752
- SHA1 a1f4df39ffc57803c332f700790ac46032cf2fc3
- SHA512 d0b77c22d40fe3244ca7ce0d2d81da70b33242bc4388406f7786a5eb621426f82fd0c7b5e6ef78bed37e5726e4683276c99352da044746dc21c47612e95b1352
- SSDEEP 98304:ISTK7pn7unTIKUN6XhASerpnKHZWfnPa+azUgXyinCspxZV9EJBiadm9YMa/YkQM:ISYSeRKHZWfnPa+azUgXLnRpxhELiadV
- TLSH T195063921BB0A480AF1B345355D1DA7974260BA3C232150C3F7D87F2AA5F25DE69F8E27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE