General
- Target 2026-05-02_bac78d0b35fe4e13748adcaa94722f60_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 5.5MB
- Sample260502-q2jwsshx7x
- SHA256 e2188f4459c536fa05bb7e717b32b66282d33b7077a84abc8364d84899c98102
- MD5 bac78d0b35fe4e13748adcaa94722f60
- SHA1 1d3b57e4c2c82b348807d872561b3e5e40e54360
- SHA512 154608c28c17f0174bf6f4845564df530bd4a293a59f35fc9059b05b1624ec5bebc2999dc2c05d0e42eecf1dc43ca9671785e87a2909ee5567756446c7a48600
- SSDEEP 49152:IylFHUv6ReIt0jSrO43CVr5Dt7i+/yTukuFGNLrkBirxsPG:DlFHU85t0jSuPhrSiGdkBirxT
- TLSH T14646A52137FA8224F5BF4B312D76E2D41A77BA66AE10C61F3069460D5D32A428F23777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-02_bac78d0b35fe4e13748adcaa94722f60_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-02_bac78d0b35fe4e13748adcaa94722f60_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-02_bac78d0b35fe4e13748adcaa94722f60_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 5.5MB
- SHA256 e2188f4459c536fa05bb7e717b32b66282d33b7077a84abc8364d84899c98102
- MD5 bac78d0b35fe4e13748adcaa94722f60
- SHA1 1d3b57e4c2c82b348807d872561b3e5e40e54360
- SHA512 154608c28c17f0174bf6f4845564df530bd4a293a59f35fc9059b05b1624ec5bebc2999dc2c05d0e42eecf1dc43ca9671785e87a2909ee5567756446c7a48600
- SSDEEP 49152:IylFHUv6ReIt0jSrO43CVr5Dt7i+/yTukuFGNLrkBirxsPG:DlFHU85t0jSuPhrSiGdkBirxT
- TLSH T14646A52137FA8224F5BF4B312D76E2D41A77BA66AE10C61F3069460D5D32A428F23777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE