General
- Target 2026-07-09_05c7a53a2f002c3cacbdc4ca2ccc5ff5_amadey_coinminer_elex_icedid_remcos_stop
- Size 389KB
- Sample260709-qes6ysbs3m
- SHA256 f6aa2f0ca28d388888db2d70038e18ec2722ceae24084dfdea86b798269d426d
- MD5 05c7a53a2f002c3cacbdc4ca2ccc5ff5
- SHA1 ca62370847f3374729e303aac20e41f7fad710e5
- SHA512 2002b08e38b25805327bac92c33a6807544c2d509d1c71258d2aa5517c0ca52a1e23ef02b39ffb8075f3a8cd7f24e6b1b2f0f56b0f455f12ce5cfcedb21fe42d
- SSDEEP 6144:QO6FuJNm/+byHc0SZTQIOUQVIePRfeSFXWM3zotHksEJQVEKtRmWEPc:QO6FuUHct/OUQVqK/cVEOEKpEPc
- TLSH T184845B107780E036D2A331718EABD274A2ADBE604F2546C7B7D43B2D5E345D2AE34B5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_05c7a53a2f002c3cacbdc4ca2ccc5ff5_amadey_coinminer_elex_icedid_remcos_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_05c7a53a2f002c3cacbdc4ca2ccc5ff5_amadey_coinminer_elex_icedid_remcos_stop.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_05c7a53a2f002c3cacbdc4ca2ccc5ff5_amadey_coinminer_elex_icedid_remcos_stop
- Size 389KB
- SHA256 f6aa2f0ca28d388888db2d70038e18ec2722ceae24084dfdea86b798269d426d
- MD5 05c7a53a2f002c3cacbdc4ca2ccc5ff5
- SHA1 ca62370847f3374729e303aac20e41f7fad710e5
- SHA512 2002b08e38b25805327bac92c33a6807544c2d509d1c71258d2aa5517c0ca52a1e23ef02b39ffb8075f3a8cd7f24e6b1b2f0f56b0f455f12ce5cfcedb21fe42d
- SSDEEP 6144:QO6FuJNm/+byHc0SZTQIOUQVIePRfeSFXWM3zotHksEJQVEKtRmWEPc:QO6FuUHct/OUQVqK/cVEOEKpEPc
- TLSH T184845B107780E036D2A331718EABD274A2ADBE604F2546C7B7D43B2D5E345D2AE34B5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Enumerates processes with tasklist