General
- Target 2026-10-06_1def9a5abe61b32782bea7e16479b7a8_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample261006-sdqqjs1vas
- SHA256 05d6c859953127e19b3f3c9d964952ed3bcc75f6a962d3e21dc5f45f9b65aa63
- MD5 1def9a5abe61b32782bea7e16479b7a8
- SHA1 dc6eb6686de01dc39003c896e789b109c1db28c6
- SHA512 259112460a785fee41db80c94652dce413d92542e59e465f900b552a5a8779f3599b0714ca96e50339509e78d30e821a13f77352b53e8b9b581ffa2030b2c5ef
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdJ:01/kjtPlERDGnlRANRdJ
- TLSH T1E8757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-06_1def9a5abe61b32782bea7e16479b7a8_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260911-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-06_1def9a5abe61b32782bea7e16479b7a8_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 05d6c859953127e19b3f3c9d964952ed3bcc75f6a962d3e21dc5f45f9b65aa63
- MD5 1def9a5abe61b32782bea7e16479b7a8
- SHA1 dc6eb6686de01dc39003c896e789b109c1db28c6
- SHA512 259112460a785fee41db80c94652dce413d92542e59e465f900b552a5a8779f3599b0714ca96e50339509e78d30e821a13f77352b53e8b9b581ffa2030b2c5ef
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdJ:01/kjtPlERDGnlRANRdJ
- TLSH T1E8757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Direct Volume Access
1Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1