2026-08-16_6769a87820f1eaff59269faaed70ac7c_elex_emotet_floxif_icedid_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-16_6769a87820f1eaff59269faaed70ac7c_elex_emotet_floxif_icedid_stop
Size 869KB
Sample260816-we15fstdjb
SHA256 269d3fde19d18fcd02d90a1f21f7500f3214a49ebb18e4abe3eaef23bee5b3ac
MD5 6769a87820f1eaff59269faaed70ac7c
SHA1 c2cac74ceda344854ed0975d2b27d45e4b2868b8
SHA512 b3222acaee49dfcbaae0bcba6a101a3cbb0d0325b7cef61eb6437a73d0a4713eecd8238a4487d3bbf16a333f416f099559e04c32a9dfab9484f01c621b08ab46
SSDEEP 12288:C/AwQ9izQ46IOwAyKe9vRei3LUcqC0EWUjBjvrEH7F4:C/AwQOdOwRVR3L1qC0EF5rEH7F4
TLSH
T1F1157C41B7F1C3B9E5A346701D66D71966B2BC985B3586CBB3C02E0F3E352C29A39316
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-16_6769a87820f1eaff59269faaed70ac7c_elex_emotet_floxif_icedid_stop

File Explorer

2026-08-16_6769a87820f1eaff59269faaed70ac7c_elex_emotet_floxif_icedid_stop

.exe 869KB

2026-08-16_6769a87820f1eaff59269faaed70ac7c_elex_emotet_floxif_icedid_stop

IMPHASH aa0a3995fe40cce990b245a8e4b8c6d7
SHA256 269d3fde19d18fcd02d90a1f21f7500f3214a49ebb18e4abe3eaef23bee5b3ac
MD5 6769a87820f1eaff59269faaed70ac7c
SHA1 c2cac74ceda344854ed0975d2b27d45e4b2868b8
SHA512 b3222acaee49dfcbaae0bcba6a101a3cbb0d0325b7cef61eb6437a73d0a4713eecd8238a4487d3bbf16a333f416f099559e04c32a9dfab9484f01c621b08ab46
SSDEEP 12288:C/AwQ9izQ46IOwAyKe9vRei3LUcqC0EWUjBjvrEH7F4:C/AwQOdOwRVR3L1qC0EF5rEH7F4
TLSH
T1F1157C41B7F1C3B9E5A346701D66D71966B2BC985B3586CBB3C02E0F3E352C29A39316
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

28:07:78:f9:a3:d8:74:a5:2d:f7:be:b5:72:98:6c:6e:56:2d:8d:21

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Chains

Mar 5, 2010

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Serial Number

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 5, 2009 - Dec 10, 2010

Minor OS version

Major OS version

Entry point

204616

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\oobe\main\c3p0\dev\target\win\release\Set-up.pdb

comctl32

InitCommonControlsEx _TrackMouseEvent ord17

kernel32

LockFile UnlockFile SetEndOfFile DuplicateHandle GetCurrentProcess GetVolumeInformationW GetFullPathNameW SetErrorMode GetFileAttributesW GetFileTime HeapFree HeapAlloc GetProcessHeap GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetStdHandle GetFileType GetSystemTimeAsFileTime RtlUnwind RaiseException HeapReAlloc ExitProcess HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA SetHandleCount GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetCPInfo GetACP GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode GetTimeZoneInformation GetLocaleInfoA SetEvent LCMapStringW GetStringTypeA GetStringTypeW EnumSystemLocalesA IsValidLocale WriteConsoleA GetConsoleOutputCP WriteConsoleW GetCurrentDirectoryA GetDriveTypeA CreateFileA SetEnvironmentVariableA OpenSemaphoreW ReleaseMutex IsDBCSLeadByteEx WaitForSingleObject CloseHandle WritePrivateProfileStringW GetThreadLocale lstrlenA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection GlobalFlags GetTickCount GetCurrentThread ConvertDefaultLocale GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW CompareStringA InterlockedExchange FileTimeToLocalFileTime FileTimeToSystemTime GlobalAlloc FormatMessageW MulDiv GetModuleHandleA lstrlenW GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom CompareStringW LoadLibraryA SetLastError lstrcmpW GetVersionExA GlobalLock GlobalUnlock GlobalFree FreeResource ReadFile FlushFileBuffers FindNextFileW FindFirstFileW FindClose GetFileSize GetTimeFormatW CreateDirectoryW SetFilePointer GetDateFormatW WriteFile GetLocalTime CreateFileW GetUserDefaultLCID GetDriveTypeW GetVersionExW GetUserDefaultUILanguage CreateProcessW GetTempPathW GetSystemDefaultLangID GetExitCodeProcess FindResourceW LockResource SizeofResource GetModuleHandleW LoadResource CreateThread GetModuleFileNameW RemoveDirectoryW FreeConsole SetFileAttributesW GetCommandLineW SetCurrentDirectoryW GetProcAddress DeleteFileW GetStdHandle CreateEventW LoadLibraryW FreeLibrary GetEnvironmentStrings CopyFileW GetLastError GetCurrentProcessId CreateSemaphoreW CreateMutexW LocalAlloc LocalFree ReleaseSemaphore MultiByteToWideChar InterlockedIncrement InterlockedDecrement WideCharToMultiByte ResetEvent Sleep LCMapStringA

user32

UnregisterClassA CharUpperW ReleaseCapture SetCapture GetSysColorBrush DestroyMenu RegisterClipboardFormatW GetMessageW TranslateMessage GetCursorPos ValidateRect SetWindowContextHelpId wsprintfW EnableWindow SendMessageW GetClientRect GetSystemMenu IsIconic LoadIconW GetWindowRect SetWindowLongW GetWindowLongW LoadImageW SetTimer EnableMenuItem KillTimer GetSystemMetrics GetWindow PostMessageW DrawIcon GetDesktopWindow GetFocus IsWindow SetCursor DrawIconEx GetDC InvalidateRect GetIconInfo FillRect ReleaseDC DestroyIcon IsWindowVisible GetParent LoadCursorW EndDialog GetNextDlgTabItem IsWindowEnabled GetDlgItem MapDialogRect PostQuitMessage SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuW GetMenuState CheckMenuItem GetWindowThreadProcessId EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW ShowWindow MoveWindow SetWindowTextW IsDialogMessageW RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture SetWindowsHookExW CallNextHookEx UnregisterClassW PostThreadMessageW MessageBeep GetNextDlgGroupItem InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableW CharNextW GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW SetFocus GetWindowTextLengthW GetWindowTextW GetForegroundWindow GetLastActivePopup DispatchMessageW GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageW MapWindowPoints GetKeyState SetForegroundWindow UpdateWindow GetMenu GetSubMenu GetMenuItemID GetMenuItemCount MessageBoxW CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW GetSysColor AdjustWindowRectEx ScreenToClient EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetActiveWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow

advapi32

SetEntriesInAclW RegSetValueExW SetSecurityDescriptorDacl AllocateAndInitializeSid InitializeSecurityDescriptor FreeSid RegCloseKey RegQueryValueExW RegOpenKeyExW RegOpenKeyW RegDeleteKeyW RegEnumKeyW RegQueryValueW RegCreateKeyExW

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CLSIDFromString CoRevokeClassObject CoTaskMemFree CoCreateGuid StringFromGUID2 CoInitializeEx CoUninitialize OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CoTaskMemAlloc CoCreateInstance OleRun CLSIDFromProgID

shell32

ShellExecuteW ord680 SHGetSpecialFolderPathW CommandLineToArgvW

oleaut32

SysAllocStringLen VariantChangeType SafeArrayDestroy SysFreeString SysStringLen VariantInit VariantCopy SysAllocString VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect VariantClear GetErrorInfo

shlwapi

PathRemoveFileSpecW StrRChrW PathRemoveBackslashW PathIsRootW PathGetDriveNumberW PathFindExtensionW PathFindFileNameW PathStripToRootW PathFileExistsW PathIsUNCW

gdi32

GetStockObject CreateRoundRectRgn CreateSolidBrush DeleteDC CreateBitmap Rectangle CreateCompatibleDC CreateCompatibleBitmap SelectObject GetTextExtentPoint32W DeleteObject CreateFontIndirectW GetClipBox SetTextColor SetBkColor SaveDC RestoreDC SetBkMode SetMapMode SelectClipRgn GetViewportExtEx GetWindowExtEx PtVisible RectVisible TextOutW ExtTextOutW Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn GetDeviceCaps CreatePen CreateRectRgnIndirect GetMapMode GetBkColor GetTextColor GetRgnBox GetObjectW

msimg32

AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

oledlg

OleUIBusyW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-16_6769a87820f1eaff59269faaed70ac7c_elex_emotet_floxif_icedid_stop

PE Signature issue

comctl32

kernel32

user32

advapi32

ole32

shell32

oleaut32

shlwapi

gdi32

msimg32

comdlg32

winspool.drv

oledlg

generic