General
- Target 2026-08-24_2ca7e9b947c944f028d9d18b9a3385e6_amadey_elex_emotet_icedid_remcos_smoke-loader_stop
- Size 704KB
- Sample260825-tz9k8asvbw
- SHA256 81b998ed29414eb3e4d2d8fd24daa90d16dd7e713ae87caf1df63ccf7b075f53
- MD5 2ca7e9b947c944f028d9d18b9a3385e6
- SHA1 deae221bca9c2b42192fa50720706b05e5deea92
- SHA512 0ee745455f2da532ccf293f3bbc8a55b83225f78c18286a05340f30a1a2557665dcce23ddf7975e071db570bcbc9c63c0a77940709c225669a3c99fc02d46e47
- SSDEEP 12288:BYb2Oism26OwcpTN2TE4+lpMH0DF1MPDfefl2WX:SPFNvTN2TVR0DF1MG2c
- TLSH T18AE45C123BF6C1BAC675117308B7936E72A2B9666B3045D32AD03E5DAE345E37C39324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_2ca7e9b947c944f028d9d18b9a3385e6_amadey_elex_emotet_icedid_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_2ca7e9b947c944f028d9d18b9a3385e6_amadey_elex_emotet_icedid_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_2ca7e9b947c944f028d9d18b9a3385e6_amadey_elex_emotet_icedid_remcos_smoke-loader_stop
- Size 704KB
- SHA256 81b998ed29414eb3e4d2d8fd24daa90d16dd7e713ae87caf1df63ccf7b075f53
- MD5 2ca7e9b947c944f028d9d18b9a3385e6
- SHA1 deae221bca9c2b42192fa50720706b05e5deea92
- SHA512 0ee745455f2da532ccf293f3bbc8a55b83225f78c18286a05340f30a1a2557665dcce23ddf7975e071db570bcbc9c63c0a77940709c225669a3c99fc02d46e47
- SSDEEP 12288:BYb2Oism26OwcpTN2TE4+lpMH0DF1MPDfefl2WX:SPFNvTN2TVR0DF1MG2c
- TLSH T18AE45C123BF6C1BAC675117308B7936E72A2B9666B3045D32AD03E5DAE345E37C39324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.