General
- Target 2026-09-30_7e7c9e66d6966f81211f8a9eacc30763_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample260930-l6ytascd27
- SHA256 1a2b1ac29435f1c57e69557f9497856d5cda0d538302a2b6d81cefa276f865cb
- MD5 7e7c9e66d6966f81211f8a9eacc30763
- SHA1 395328ba0faaf6db24549264701f6afe8c7a0f32
- SHA512 ae550499fc7c1ace2244348213fddec439453464557fdd730da9c7f9cb97953959d1681b6eee994c40147f560325cde4c4a665e2afa35fceec65064b4d1bb009
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRd3:01/kjtPlERDGnlRANRd3
- TLSH T1C0757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_7e7c9e66d6966f81211f8a9eacc30763_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260911-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_7e7c9e66d6966f81211f8a9eacc30763_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 1a2b1ac29435f1c57e69557f9497856d5cda0d538302a2b6d81cefa276f865cb
- MD5 7e7c9e66d6966f81211f8a9eacc30763
- SHA1 395328ba0faaf6db24549264701f6afe8c7a0f32
- SHA512 ae550499fc7c1ace2244348213fddec439453464557fdd730da9c7f9cb97953959d1681b6eee994c40147f560325cde4c4a665e2afa35fceec65064b4d1bb009
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRd3:01/kjtPlERDGnlRANRd3
- TLSH T1C0757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.