General
- Target 2026-11-01_902c4237738efbf09787df45c05e59d0_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample261102-sbaljsay7t
- SHA256 acab1b70064613b87038f8635928d9688f0f26f8d6199df30a2afeb2bba6aa74
- MD5 902c4237738efbf09787df45c05e59d0
- SHA1 231e9a7496b8d2887faf0ff147765397f38a3f7f
- SHA512 6dcb2242f67c7a81d7cf2b85b886184bdb12009df46df18e249026977126c37e0ea3c50757156e8330d071c8abab1f476f71603f37f14523d30d72e751e92686
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRde:01/kjtPlERDGnlRANRde
- TLSH T1C2757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92CEB45D612E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_902c4237738efbf09787df45c05e59d0_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260911-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_902c4237738efbf09787df45c05e59d0_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win11ltsc2024-20260911-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_902c4237738efbf09787df45c05e59d0_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 acab1b70064613b87038f8635928d9688f0f26f8d6199df30a2afeb2bba6aa74
- MD5 902c4237738efbf09787df45c05e59d0
- SHA1 231e9a7496b8d2887faf0ff147765397f38a3f7f
- SHA512 6dcb2242f67c7a81d7cf2b85b886184bdb12009df46df18e249026977126c37e0ea3c50757156e8330d071c8abab1f476f71603f37f14523d30d72e751e92686
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRde:01/kjtPlERDGnlRANRde
- TLSH T1C2757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92CEB45D612E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.