General
- Target 2026-09-30_81d69b0871df2593b91b2c97e542503a_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample260930-l2xqfavyey
- SHA256 9bf8a260923da8d05813ef5afd6e2a842be753fd42b19a5e9423c2a5d064265e
- MD5 81d69b0871df2593b91b2c97e542503a
- SHA1 8da804647d2f54e8d8951b160953ab9dc8916229
- SHA512 330200057e73b876ff40d189260c4b1a7ae6307b6f036cb2c952dc2a47a8c22f8f1116849f45e7636694ed2c24d8997a287c46e2063d51697f157b0b445f2bb6
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRd2:01/kjtPlERDGnlRANRd2
- TLSH T157757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_81d69b0871df2593b91b2c97e542503a_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260911-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_81d69b0871df2593b91b2c97e542503a_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 9bf8a260923da8d05813ef5afd6e2a842be753fd42b19a5e9423c2a5d064265e
- MD5 81d69b0871df2593b91b2c97e542503a
- SHA1 8da804647d2f54e8d8951b160953ab9dc8916229
- SHA512 330200057e73b876ff40d189260c4b1a7ae6307b6f036cb2c952dc2a47a8c22f8f1116849f45e7636694ed2c24d8997a287c46e2063d51697f157b0b445f2bb6
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRd2:01/kjtPlERDGnlRANRd2
- TLSH T157757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.