2026-10-22_6e4a75f5e0d6bbb6b5f92346b7969262_elex_emotet_icedid

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_6e4a75f5e0d6bbb6b5f92346b7969262_elex_emotet_icedid
Size 296KB
Sample261024-lb5ncsys4n
SHA256 bb54aa12ea2f6c10574cb974be4105a0abb11c9588754f4c7c8ac2bdb3161a51
MD5 6e4a75f5e0d6bbb6b5f92346b7969262
SHA1 47d60735130f7a7bdd354c376e0520c3eff80cfe
SHA512 36325bf1aeb4cd5bf0aff8ab857abbb67d4028167ebd6d6b1e4afb797da424ab0de691e36080a4e27cebbbeaf50cf8491513aaefa9891e9c9243e791c53b1c86
SSDEEP 6144:qdTLTHbD35+eICL50wSaoJy4DRLNWD9A:q5rf35dH57St1R0
TLSH
T1FB545A0272A08936E39313354E93D79662BABDB46E31C24FE3643F2D99711C2663771E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_6e4a75f5e0d6bbb6b5f92346b7969262_elex_emotet_icedid

File Explorer

2026-10-22_6e4a75f5e0d6bbb6b5f92346b7969262_elex_emotet_icedid

.exe 296KB

2026-10-22_6e4a75f5e0d6bbb6b5f92346b7969262_elex_emotet_icedid

IMPHASH 0c8de16a7a1e482c9200b476dffa9c38
SHA256 bb54aa12ea2f6c10574cb974be4105a0abb11c9588754f4c7c8ac2bdb3161a51
MD5 6e4a75f5e0d6bbb6b5f92346b7969262
SHA1 47d60735130f7a7bdd354c376e0520c3eff80cfe
SHA512 36325bf1aeb4cd5bf0aff8ab857abbb67d4028167ebd6d6b1e4afb797da424ab0de691e36080a4e27cebbbeaf50cf8491513aaefa9891e9c9243e791c53b1c86
SSDEEP 6144:qdTLTHbD35+eICL50wSaoJy4DRLNWD9A:q5rf35dH57St1R0
TLSH
T1FB545A0272A08936E39313354E93D79662BABDB46E31C24FE3643F2D99711C2663771E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

89318

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\JinZQ\Hook开机启动\sttray\Release\sttray.pdb

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

wininet

InternetReadFile InternetOpenUrlA InternetCloseHandle InternetOpenA InternetGetConnectedState HttpQueryInfoA

winmm

timeGetTime

kernel32

DuplicateHandle GetCurrentProcess FindClose FindFirstFileA GetVolumeInformationA GetFullPathNameA SetErrorMode FileTimeToLocalFileTime GetFileAttributesA GetFileTime ExitProcess RtlUnwind HeapAlloc HeapFree VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetFileSize GetStartupInfoA GetCommandLineA HeapReAlloc HeapSize QueryPerformanceCounter GetCurrentProcessId HeapDestroy HeapCreate VirtualFree IsBadWritePtr GetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetTimeZoneInformation SetStdHandle IsBadReadPtr IsBadCodePtr SetEnvironmentVariableA SetEndOfFile UnlockFile LockFile FlushFileBuffers RaiseException GetOEMCP GetCPInfo InterlockedIncrement GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc FileTimeToSystemTime InterlockedDecrement GetCurrentThread lstrcmpA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA SetLastError GlobalFree MulDiv GlobalAlloc GlobalLock GlobalUnlock FormatMessageA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcatA lstrcmpW lstrcpynA GetModuleHandleA LocalFree CreateThread CreateProcessA LoadLibraryA GetProcAddress FreeLibrary GetPrivateProfileStringA WritePrivateProfileStringA CopyFileA Sleep GetModuleFileNameA FindResourceA LoadResource LockResource SizeofResource OpenProcess GetPriorityClass TerminateProcess CreateToolhelp32Snapshot Process32First Process32Next CompareStringW CompareStringA lstrcmpiA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange WriteFile CreateFileA ReadFile SetFilePointer CloseHandle BeginUpdateResourceA UpdateResourceA EndUpdateResourceA CreateDirectoryA GetTickCount MoveFileExA lstrlenA DeleteFileA GetSystemTimeAsFileTime

user32

RegisterClipboardFormatA PostThreadMessageA ReleaseCapture SetCapture CharNextA LoadCursorA GetSysColorBrush EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu SetWindowContextHelpId MapDialogRect wsprintfA GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetMessageA TranslateMessage GetActiveWindow GetCursorPos ValidateRect SetCursor PostQuitMessage SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA GetFocus IsWindow SetFocus IsChild GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints MessageBoxA GetKeyState SetForegroundWindow IsWindowVisible GetMenu PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx GetParent EqualRect GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA MessageBeep GetNextDlgGroupItem InvalidateRgn GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect CopyRect PtInRect GetWindow GetSystemMetrics InvalidateRect CopyAcceleratorTableA SetRect IsRectEmpty LoadIconA GetClientRect IsIconic GetSystemMenu SendMessageA AppendMenuA DrawIcon CharUpperA GetIconInfo EnableWindow SendDlgItemMessageA UpdateWindow SetDlgItemTextA RemovePropA

gdi32

ExtSelectClipRgn GetStockObject PtVisible GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode GetWindowExtEx GetViewportExtEx ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA GetDeviceCaps CreateBitmap SetBkColor SetTextColor GetClipBox DeleteObject CreateCompatibleDC GetDIBits DeleteDC GetObjectA SetMapMode RestoreDC SaveDC ExtTextOutA RectVisible

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegEnumValueA RegOpenKeyExA RegOpenKeyA RegQueryValueExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

shell32

ShellExecuteA ExtractIconA

comctl32

ord17

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoGetClassObject CoTaskMemFree CoTaskMemAlloc CLSIDFromProgID CLSIDFromString CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes

oleaut32

VariantClear SafeArrayDestroy VariantCopy SysAllocStringByteLen SysStringLen SysAllocStringLen SysFreeString VariantInit VariantChangeType SysAllocString SystemTimeToVariantTime OleCreateFontIndirect

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_6e4a75f5e0d6bbb6b5f92346b7969262_elex_emotet_icedid

version

wininet

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

generic