General
- Target 2026-11-07_9dfe2dad1f7399a26cc9388c0530e718_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- Sample261107-nvzybsxt8k
- SHA256 edafa43689b1e0be1ddc2c9139b701c512576924bf7cabdd2f3d1165c23583a4
- MD5 9dfe2dad1f7399a26cc9388c0530e718
- SHA1 9e8f2dda15f03bf0babf18b22a245e81e3ce29fd
- SHA512 eb6540737afbebeaab0a5a3754cd07461be3b1c5d600e0edb347bf392beb94946f8b258961d2a33eddee050c8fb804634a142ce9b4962aa3da768bb976f6bb24
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdS:01/kjtPlERDGnlRANRdS
- TLSH T17A757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-07_9dfe2dad1f7399a26cc9388c0530e718_elex_emotet_icedid_krbanker_remcos_stop.exe
Resource
win10v2004-20260911-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-07_9dfe2dad1f7399a26cc9388c0530e718_elex_emotet_icedid_krbanker_remcos_stop
- Size 1.5MB
- SHA256 edafa43689b1e0be1ddc2c9139b701c512576924bf7cabdd2f3d1165c23583a4
- MD5 9dfe2dad1f7399a26cc9388c0530e718
- SHA1 9e8f2dda15f03bf0babf18b22a245e81e3ce29fd
- SHA512 eb6540737afbebeaab0a5a3754cd07461be3b1c5d600e0edb347bf392beb94946f8b258961d2a33eddee050c8fb804634a142ce9b4962aa3da768bb976f6bb24
- SSDEEP 24576:0++ZwJfwCI8Ddfs/kMUftLGZ98FlE6wI+gfnlRIfaE3JRdS:01/kjtPlERDGnlRANRdS
- TLSH T17A757C23E691C0F1D11100B11AF5573DAA78BB774E359BA3EB92DEB45D212E2CE1720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Direct Volume Access
1Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1