General
- Target 2026-10-13_671fefeacc2fd09b62c702f714640c6f_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample261015-n4mdlact7x
- SHA256 0c29f5a9ed37b9941a267d9ae753a43641486ef1e45c5922fd6aa9251b8341ea
- MD5 671fefeacc2fd09b62c702f714640c6f
- SHA1 045d71096259a47329139b19618cbd4e2590139d
- SHA512 22a21e1ca29ed7af421e296f0265830a1b16ef5fa22094005bb47d667221f023eeb651358a1c2718d6033469e262d8dc58bec09fa79ff68173883d6b38db5fdc
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdd:01/kjtPlERDGnlRANRdd
- TLSH T127757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-13_671fefeacc2fd09b62c702f714640c6f_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260911-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-13_671fefeacc2fd09b62c702f714640c6f_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win11ltsc2024-20260911-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_671fefeacc2fd09b62c702f714640c6f_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 0c29f5a9ed37b9941a267d9ae753a43641486ef1e45c5922fd6aa9251b8341ea
- MD5 671fefeacc2fd09b62c702f714640c6f
- SHA1 045d71096259a47329139b19618cbd4e2590139d
- SHA512 22a21e1ca29ed7af421e296f0265830a1b16ef5fa22094005bb47d667221f023eeb651358a1c2718d6033469e262d8dc58bec09fa79ff68173883d6b38db5fdc
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdd:01/kjtPlERDGnlRANRdd
- TLSH T127757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.