General
- Target 2026-11-02_e71b53880328006d2c8ac128a25446bb_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample261102-yeb7faez6q
- SHA256 f614233fd7a0a8c095960f7956712ccc9e083009cc70209ee0c9c7f82a1a461c
- MD5 e71b53880328006d2c8ac128a25446bb
- SHA1 c324f2344a182e5c5c8fe0ada475b568dab5e3df
- SHA512 23fac1f4f1206288e75fb4b6746544cbcd21d4057d879320b10c16d96b390dd9ce170a976c92d09815762b9c0ba604466bcfc2ddc0f96e7fbfc2e31cf3e1adc2
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRds:01/kjtPlERDGnlRANRds
- TLSH T1E9757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92CEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_e71b53880328006d2c8ac128a25446bb_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260911-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-02_e71b53880328006d2c8ac128a25446bb_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win11ltsc2024-20260911-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_e71b53880328006d2c8ac128a25446bb_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 f614233fd7a0a8c095960f7956712ccc9e083009cc70209ee0c9c7f82a1a461c
- MD5 e71b53880328006d2c8ac128a25446bb
- SHA1 c324f2344a182e5c5c8fe0ada475b568dab5e3df
- SHA512 23fac1f4f1206288e75fb4b6746544cbcd21d4057d879320b10c16d96b390dd9ce170a976c92d09815762b9c0ba604466bcfc2ddc0f96e7fbfc2e31cf3e1adc2
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRds:01/kjtPlERDGnlRANRds
- TLSH T1E9757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92CEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.