General
- Target 2026-09-29_693418edc4c62d9dda9811f8f8f10121_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample260930-ylk3xstdlh
- SHA256 1cdb877f1ad383f4f84bafa8290d20bd61b20b61a71831bbdba44a27e2c28e20
- MD5 693418edc4c62d9dda9811f8f8f10121
- SHA1 d7a613e7d96a65b452a1b8252ab65b91257c668a
- SHA512 bdb557725a8e988003ed3a23117be22a91c49a302f245bca7c556bdec1b526f115f82203492f80fc2b91c69580cdb8b4c8a4c0c45f92c2583d16a4523753fc12
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdv:01/kjtPlERDGnlRANRdv
- TLSH T1E1757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_693418edc4c62d9dda9811f8f8f10121_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260911-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_693418edc4c62d9dda9811f8f8f10121_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 1cdb877f1ad383f4f84bafa8290d20bd61b20b61a71831bbdba44a27e2c28e20
- MD5 693418edc4c62d9dda9811f8f8f10121
- SHA1 d7a613e7d96a65b452a1b8252ab65b91257c668a
- SHA512 bdb557725a8e988003ed3a23117be22a91c49a302f245bca7c556bdec1b526f115f82203492f80fc2b91c69580cdb8b4c8a4c0c45f92c2583d16a4523753fc12
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdv:01/kjtPlERDGnlRANRdv
- TLSH T1E1757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1