General
- Target 2026-06-29_d26e098dbdfad08c0f6212cb78777124_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- Sample260630-dpafdadv2s
- SHA256 9e0dc9910d617e842f664f72e8a613fa4532e1985901af49012f7c23ea2f7f19
- MD5 d26e098dbdfad08c0f6212cb78777124
- SHA1 52f0e5123467b8669d43e15f6e4cbf75567ad080
- SHA512 4070f82e0a24b4b64a38d1b00bdaf2359c9386d3fbe489aa5a643e354a9cc5a32d99aca2a54086e018701558c800ccce0f35e8dd86c266af7f5d490355e0cd30
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yTR:DlFHU85t0jSbAwhrSR
- TLSH T1AF06D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_d26e098dbdfad08c0f6212cb78777124_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_d26e098dbdfad08c0f6212cb78777124_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_d26e098dbdfad08c0f6212cb78777124_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- SHA256 9e0dc9910d617e842f664f72e8a613fa4532e1985901af49012f7c23ea2f7f19
- MD5 d26e098dbdfad08c0f6212cb78777124
- SHA1 52f0e5123467b8669d43e15f6e4cbf75567ad080
- SHA512 4070f82e0a24b4b64a38d1b00bdaf2359c9386d3fbe489aa5a643e354a9cc5a32d99aca2a54086e018701558c800ccce0f35e8dd86c266af7f5d490355e0cd30
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yTR:DlFHU85t0jSbAwhrSR
- TLSH T1AF06D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE