General
- Target 2026-06-26_5f4f5f81e06bcbfe8fd7752a238306a1_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260629-s3thqsgz2t
- SHA256 66519af730769160184134af63c8482005960bc24a118a616c9d4633b2c3b2d1
- MD5 5f4f5f81e06bcbfe8fd7752a238306a1
- SHA1 5166119354dec51d10bec4ea3a5cdc43eccc47dd
- SHA512 8931ef4d75866cf92dac8789d49733b89a0cb5c724d0cb032cde3e819dd387a2835027b57abaefee5511a401de940716f2b05bc5b4b6944458bb905b2a8b7ecb
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fB:IylFHUv6ReIt0jSrOVQZB
- TLSH T1FF758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_5f4f5f81e06bcbfe8fd7752a238306a1_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_5f4f5f81e06bcbfe8fd7752a238306a1_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_5f4f5f81e06bcbfe8fd7752a238306a1_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 66519af730769160184134af63c8482005960bc24a118a616c9d4633b2c3b2d1
- MD5 5f4f5f81e06bcbfe8fd7752a238306a1
- SHA1 5166119354dec51d10bec4ea3a5cdc43eccc47dd
- SHA512 8931ef4d75866cf92dac8789d49733b89a0cb5c724d0cb032cde3e819dd387a2835027b57abaefee5511a401de940716f2b05bc5b4b6944458bb905b2a8b7ecb
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fB:IylFHUv6ReIt0jSrOVQZB
- TLSH T1FF758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE