General
- Target 2026-11-03_6909f1446b8b7316ee51382898670f87_amadey_elex_emotet_icedid_smoke-loader_stealc_stop
- Size 1.5MB
- Sample261104-wrdvpayv9m
- SHA256 5c5fb3c8cab3b8e88b4a6a17ab93992bb73d1814ac7bfd863ea914f9176a0c2f
- MD5 6909f1446b8b7316ee51382898670f87
- SHA1 a827d4f35f4464ff971db7c038b9d6165c914d70
- SHA512 9678ef538d1c24f86cb960eceb7683b1682eb615a759577cea27c024f7deab979243ed88a452c887e9e346dd484cbfaa30446c373c56d7b96667d681ca36acf5
- SSDEEP 24576:33Bgi7OsIdHFua0KqjW/UGeMohWH/82B9:HBgWOshzvjW/UFMohnm9
- TLSH T12475021077F2C873D1A315734E52D7A9B7B6BE529D35824B67C03B0EDE30182CA29B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_6909f1446b8b7316ee51382898670f87_amadey_elex_emotet_icedid_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_6909f1446b8b7316ee51382898670f87_amadey_elex_emotet_icedid_smoke-loader_stealc_stop
- Size 1.5MB
- SHA256 5c5fb3c8cab3b8e88b4a6a17ab93992bb73d1814ac7bfd863ea914f9176a0c2f
- MD5 6909f1446b8b7316ee51382898670f87
- SHA1 a827d4f35f4464ff971db7c038b9d6165c914d70
- SHA512 9678ef538d1c24f86cb960eceb7683b1682eb615a759577cea27c024f7deab979243ed88a452c887e9e346dd484cbfaa30446c373c56d7b96667d681ca36acf5
- SSDEEP 24576:33Bgi7OsIdHFua0KqjW/UGeMohWH/82B9:HBgWOshzvjW/UFMohnm9
- TLSH T12475021077F2C873D1A315734E52D7A9B7B6BE529D35824B67C03B0EDE30182CA29B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1