General
- Target 2026-05-29_e00a10abd61f2a0def6a960e0965e5ec_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260529-d4ct2scs8x
- SHA256 9259a0daa13c9bc91f64b5534ceb186bada196f3c1a4ff8e44b8e780926c742b
- MD5 e00a10abd61f2a0def6a960e0965e5ec
- SHA1 6a623fcb385ea899f1d83b1c9b8b37c936dd90b7
- SHA512 8f201d795794084a817a8397fa0703768d1a6848693645793e0efda0fca81931c949602fbe19d57224c21c3608f5d11f3dbe55a7c7f6350961aa9e8a54414e4d
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3f/:IylFHUv6ReIt0jSrOVQZ/
- TLSH T1C7758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_e00a10abd61f2a0def6a960e0965e5ec_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_e00a10abd61f2a0def6a960e0965e5ec_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_e00a10abd61f2a0def6a960e0965e5ec_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 9259a0daa13c9bc91f64b5534ceb186bada196f3c1a4ff8e44b8e780926c742b
- MD5 e00a10abd61f2a0def6a960e0965e5ec
- SHA1 6a623fcb385ea899f1d83b1c9b8b37c936dd90b7
- SHA512 8f201d795794084a817a8397fa0703768d1a6848693645793e0efda0fca81931c949602fbe19d57224c21c3608f5d11f3dbe55a7c7f6350961aa9e8a54414e4d
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3f/:IylFHUv6ReIt0jSrOVQZ/
- TLSH T1C7758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE