General
- Target 2026-09-30_85ac5136741fe86101be9e138bbb818e_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample260930-lyk78svwcs
- SHA256 211f3746aa4b27bcb58418ca9448460c21168bcb7c9a54e56919ddc00a3b1bc3
- MD5 85ac5136741fe86101be9e138bbb818e
- SHA1 20b6d9d83c0e3139066a5d1f6f34591fa3b8fdc2
- SHA512 ee8a97bc521aee3bc4a15591fdcef32bb3e4b74fff6094f3c0cae38bd3ef2f52a23b0ccab0b848662f6373d55beab4aef5445e80cf9e33b8c1ae571a8de540df
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdN:01/kjtPlERDGnlRANRdN
- TLSH T110757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_85ac5136741fe86101be9e138bbb818e_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260911-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_85ac5136741fe86101be9e138bbb818e_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 211f3746aa4b27bcb58418ca9448460c21168bcb7c9a54e56919ddc00a3b1bc3
- MD5 85ac5136741fe86101be9e138bbb818e
- SHA1 20b6d9d83c0e3139066a5d1f6f34591fa3b8fdc2
- SHA512 ee8a97bc521aee3bc4a15591fdcef32bb3e4b74fff6094f3c0cae38bd3ef2f52a23b0ccab0b848662f6373d55beab4aef5445e80cf9e33b8c1ae571a8de540df
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdN:01/kjtPlERDGnlRANRdN
- TLSH T110757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.