150f66a22989de5958e7a3927bb86fdff4a256766162e9384539d15105f2a4c3 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-09-29...op.exe

windows10-2004-x64

7

2026-09-29...op.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-29_122fa99ba0b9d1b8d222622ad1a9e774_elex_emotet_icedid_krbanker_remcos_stop
Size 1.5MB
Sample260930-f2ea7szeka
SHA256 150f66a22989de5958e7a3927bb86fdff4a256766162e9384539d15105f2a4c3
MD5 122fa99ba0b9d1b8d222622ad1a9e774
SHA1 faeeb8b1930b44234a22b515b2be611343e546cd
SHA512 2aa0f60a0b6f7f5f5be3cf682580516f4bc6a185b44dd1d24b54c2e80954e2acb6968d288692e1644ecdd4cec0a0663a62e19ff333699785f3e124714b1e3d10
SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdb:01/kjtPlERDGnlRANRdb
TLSH
T11B757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware defense_evasion discovery execution spyware trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-09-29_122fa99ba0b9d1b8d222622ad1a9e774_elex_emotet_icedid_krbanker_remcos_stop.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

21 signatures

150 seconds

adware defense_evasion discovery execution spyware trojan

Behavioral task

behavioral2

Sample

2026-09-29_122fa99ba0b9d1b8d222622ad1a9e774_elex_emotet_icedid_krbanker_remcos_stop.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

19 signatures

150 seconds

adware discovery execution spyware

Malware Config

Targets

- Target
  2026-09-29_122fa99ba0b9d1b8d222622ad1a9e774_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 150f66a22989de5958e7a3927bb86fdff4a256766162e9384539d15105f2a4c3
- MD5 122fa99ba0b9d1b8d222622ad1a9e774
- SHA1 faeeb8b1930b44234a22b515b2be611343e546cd
- SHA512 2aa0f60a0b6f7f5f5be3cf682580516f4bc6a185b44dd1d24b54c2e80954e2acb6968d288692e1644ecdd4cec0a0663a62e19ff333699785f3e124714b1e3d10
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdb:01/kjtPlERDGnlRANRdb
- TLSH
  T11B757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware defense_evasion discovery execution spyware trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwaredefense_evasiondiscoveryexecutionspywaretrojan

behavioral2

adwarediscoveryexecutionspyware

© 2018-2026

Terms | Privacy