General
- Target 2026-04-16_0a4df1bda146ee3090e1d7db89a1454f_coinminer_elex_emotet_glassworm_icedid_remcos
- Size 10.6MB
- Sample260416-qagmcsa13v
- SHA256 25e671fbf1a43cad160924a0c40548ac895ad734d22d01aa15c91770e99bf248
- MD5 0a4df1bda146ee3090e1d7db89a1454f
- SHA1 00ba718ac8bfa084266d0c6d6f9ec8313e146d91
- SHA512 6d2a9d3aeaa33ce422d149540aae758e385f82affaa947b8219ed7d38ed20566798949405837d78beb2162ca6920622ffae050dd036cd2a4dd93303cb362fc8f
- SSDEEP 196608:dYtJ8eYqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKOU7DpI:itJ8eD4F3e+biSDcQwM8uDuo
- TLSH T112B6CF233930EC50F8441A7BD2A2473828762A4468B6C417F74CFE677F755236A6EA1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-16_0a4df1bda146ee3090e1d7db89a1454f_coinminer_elex_emotet_glassworm_icedid_remcos.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_0a4df1bda146ee3090e1d7db89a1454f_coinminer_elex_emotet_glassworm_icedid_remcos.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_0a4df1bda146ee3090e1d7db89a1454f_coinminer_elex_emotet_glassworm_icedid_remcos
- Size 10.6MB
- SHA256 25e671fbf1a43cad160924a0c40548ac895ad734d22d01aa15c91770e99bf248
- MD5 0a4df1bda146ee3090e1d7db89a1454f
- SHA1 00ba718ac8bfa084266d0c6d6f9ec8313e146d91
- SHA512 6d2a9d3aeaa33ce422d149540aae758e385f82affaa947b8219ed7d38ed20566798949405837d78beb2162ca6920622ffae050dd036cd2a4dd93303cb362fc8f
- SSDEEP 196608:dYtJ8eYqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKOU7DpI:itJ8eD4F3e+biSDcQwM8uDuo
- TLSH T112B6CF233930EC50F8441A7BD2A2473828762A4468B6C417F74CFE677F755236A6EA1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL