General
- Target 2026-09-30_80cd0799aa34797da9f79669c90780b1_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample260930-l44xjaydnd
- SHA256 95aa05d3d3771ab4f05b55cb42aa42358b1032214871fd0c2f781c8ec07aa613
- MD5 80cd0799aa34797da9f79669c90780b1
- SHA1 49bf1e72bee9b6d0568b3ce5dbf18ac55fc24d6d
- SHA512 70cdec4a3795d67c5f7a9ab9966577f8d123fa044d83cd56bd75a41e738a48738ef8a5ec8ac8e829e31f1528778beead56559595876d8b17e1efadbc6772ff6e
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRd8:01/kjtPlERDGnlRANRd8
- TLSH T1E9757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_80cd0799aa34797da9f79669c90780b1_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260911-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_80cd0799aa34797da9f79669c90780b1_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 95aa05d3d3771ab4f05b55cb42aa42358b1032214871fd0c2f781c8ec07aa613
- MD5 80cd0799aa34797da9f79669c90780b1
- SHA1 49bf1e72bee9b6d0568b3ce5dbf18ac55fc24d6d
- SHA512 70cdec4a3795d67c5f7a9ab9966577f8d123fa044d83cd56bd75a41e738a48738ef8a5ec8ac8e829e31f1528778beead56559595876d8b17e1efadbc6772ff6e
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRd8:01/kjtPlERDGnlRANRd8
- TLSH T1E9757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.