General
- Target 2026-06-26_f7c28b1b4b9f62fe38a10d16bb0302c3_coinminer_elex_emotet_icedid_remcos
- Size 2.6MB
- Sample260629-m3bp2adv2q
- SHA256 4da9540f0ef960d869720d8280412c4a9d4bcd75e39f7be60bf9611febded24c
- MD5 f7c28b1b4b9f62fe38a10d16bb0302c3
- SHA1 9800cf191ccfde11e441a1ac07dec9f92081dbbf
- SHA512 d8e2db1541be8f8c4becf5b199baab035718075c0b84aaa29336bebdedee40676b0e241e78af0cabe3ca0dfaa69992817d76183b90de237cb43aed411a2352bc
- SSDEEP 49152:zQvmUQ81WABMLtlG4vB1aSvOWdwqM7mhCGXa+:InQeJBMLtlG4vPfvOdqPEGZ
- TLSH T104C55B23E25184B1F02925B062B217387E79A7B44D35D9D3EBE8CCF52E26671A7DB10C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-26_f7c28b1b4b9f62fe38a10d16bb0302c3_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_f7c28b1b4b9f62fe38a10d16bb0302c3_coinminer_elex_emotet_icedid_remcos
- Size 2.6MB
- SHA256 4da9540f0ef960d869720d8280412c4a9d4bcd75e39f7be60bf9611febded24c
- MD5 f7c28b1b4b9f62fe38a10d16bb0302c3
- SHA1 9800cf191ccfde11e441a1ac07dec9f92081dbbf
- SHA512 d8e2db1541be8f8c4becf5b199baab035718075c0b84aaa29336bebdedee40676b0e241e78af0cabe3ca0dfaa69992817d76183b90de237cb43aed411a2352bc
- SSDEEP 49152:zQvmUQ81WABMLtlG4vB1aSvOWdwqM7mhCGXa+:InQeJBMLtlG4vPfvOdqPEGZ
- TLSH T104C55B23E25184B1F02925B062B217387E79A7B44D35D9D3EBE8CCF52E26671A7DB10C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE