General
- Target 2026-07-08_34c404cbfc37a60247956c4f6a292b77_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260708-lysmbae17l
- SHA256 25c833b77a89995f4d52b0ac6b27814713158f1fd70e71dcc2f1c3e744656bad
- MD5 34c404cbfc37a60247956c4f6a292b77
- SHA1 e3760621f3267cc32176ae05cacc88d01f75f330
- SHA512 e9b11e166d51827cf3f7e8a95e673334337d2f889e91234ec44b0ec94bd31e7500f4028f18c52fbd5edce02f1af7129c8b7432f675fd2c3deb79d30e5fdead23
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fd:IylFHUv6ReIt0jSrOVQZd
- TLSH T1B5758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_34c404cbfc37a60247956c4f6a292b77_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_34c404cbfc37a60247956c4f6a292b77_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_34c404cbfc37a60247956c4f6a292b77_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 25c833b77a89995f4d52b0ac6b27814713158f1fd70e71dcc2f1c3e744656bad
- MD5 34c404cbfc37a60247956c4f6a292b77
- SHA1 e3760621f3267cc32176ae05cacc88d01f75f330
- SHA512 e9b11e166d51827cf3f7e8a95e673334337d2f889e91234ec44b0ec94bd31e7500f4028f18c52fbd5edce02f1af7129c8b7432f675fd2c3deb79d30e5fdead23
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fd:IylFHUv6ReIt0jSrOVQZd
- TLSH T1B5758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE