General
- Target 2026-08-20_89869c359e4d66f73b07df6cdc701f29_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample260820-hselqagj31
- SHA256 88352b1b30e901998fd1506f1735d92a4be411ff966243876b5ffb6b42e91da0
- MD5 89869c359e4d66f73b07df6cdc701f29
- SHA1 6389c36e166f99a50ae50ad6126d278c3080ef38
- SHA512 753a41bdcb6ece518b6c4a7698ac48180f9c5b13102105a5a435bde51360f7c90c6634966f2468acfe6763141704618a1b6112b62df0aaf4958b1677ed6fd432
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdM:01/kjtPlERDGnlRANRdM
- TLSH T1A4757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_89869c359e4d66f73b07df6cdc701f29_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_89869c359e4d66f73b07df6cdc701f29_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 88352b1b30e901998fd1506f1735d92a4be411ff966243876b5ffb6b42e91da0
- MD5 89869c359e4d66f73b07df6cdc701f29
- SHA1 6389c36e166f99a50ae50ad6126d278c3080ef38
- SHA512 753a41bdcb6ece518b6c4a7698ac48180f9c5b13102105a5a435bde51360f7c90c6634966f2468acfe6763141704618a1b6112b62df0aaf4958b1677ed6fd432
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdM:01/kjtPlERDGnlRANRdM
- TLSH T1A4757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1