General
- Target 2026-08-24_c6cb1e52e929bec83c6570bd0d62d33b_amadey_elex_emotet_icedid_remcos_smoke-loader_stop
- Size 1.6MB
- Sample260825-bz3tkawbmg
- SHA256 9cf07fdbb77d5df7c6b3ceaf31c8a992b91225817d612ad9db0ce03d4e31b709
- MD5 c6cb1e52e929bec83c6570bd0d62d33b
- SHA1 d568f5a141f7ffe2bb154b79d319cc7b01f68cf0
- SHA512 91d51ac9883224093b5c821e135c34ba7c9e782e76c5a65aa04e04b016306ffe5e4e890b34e2220744984b53a0f662d964d6bdcad2299ecd77bd80f613b615c3
- SSDEEP 12288:hdeN+zNjuuyMbaANMjNC+UkqUuBQoLEP73fJ4yb+QdIKYKNCJKHZDgdVw8XkLavJ:hk+FuzMbaPNC+tfJ4yL/tNCJPXUQrPZ
- TLSH T19975E011B7D5C076C6A702724F92D32AB3B1BE909F3582877BD03E1E6EB05D29939B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_c6cb1e52e929bec83c6570bd0d62d33b_amadey_elex_emotet_icedid_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_c6cb1e52e929bec83c6570bd0d62d33b_amadey_elex_emotet_icedid_remcos_smoke-loader_stop
- Size 1.6MB
- SHA256 9cf07fdbb77d5df7c6b3ceaf31c8a992b91225817d612ad9db0ce03d4e31b709
- MD5 c6cb1e52e929bec83c6570bd0d62d33b
- SHA1 d568f5a141f7ffe2bb154b79d319cc7b01f68cf0
- SHA512 91d51ac9883224093b5c821e135c34ba7c9e782e76c5a65aa04e04b016306ffe5e4e890b34e2220744984b53a0f662d964d6bdcad2299ecd77bd80f613b615c3
- SSDEEP 12288:hdeN+zNjuuyMbaANMjNC+UkqUuBQoLEP73fJ4yb+QdIKYKNCJKHZDgdVw8XkLavJ:hk+FuzMbaPNC+tfJ4yL/tNCJPXUQrPZ
- TLSH T19975E011B7D5C076C6A702724F92D32AB3B1BE909F3582877BD03E1E6EB05D29939B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1