General
- Target 2026-07-10_13dc8e860b8d13308992511e6e603c37_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260710-j7dteafy9p
- SHA256 96bc20a142641d27a780575f7460a1d3de98c2a27dfa9649ba64282c6334b5b4
- MD5 13dc8e860b8d13308992511e6e603c37
- SHA1 9d74c6ebace2e7d0833b52df19173393619a5548
- SHA512 6ad905ada500ea0fbaacc45ff6f50ff47ef33c2da58e6a1e4d48dd52da85caa8fa652b6db18db668839b36d0049e83d02dca43c463799261a52aaf3c0b087f06
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3f+:IylFHUv6ReIt0jSrOVQZ+
- TLSH T11F758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_13dc8e860b8d13308992511e6e603c37_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_13dc8e860b8d13308992511e6e603c37_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_13dc8e860b8d13308992511e6e603c37_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 96bc20a142641d27a780575f7460a1d3de98c2a27dfa9649ba64282c6334b5b4
- MD5 13dc8e860b8d13308992511e6e603c37
- SHA1 9d74c6ebace2e7d0833b52df19173393619a5548
- SHA512 6ad905ada500ea0fbaacc45ff6f50ff47ef33c2da58e6a1e4d48dd52da85caa8fa652b6db18db668839b36d0049e83d02dca43c463799261a52aaf3c0b087f06
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3f+:IylFHUv6ReIt0jSrOVQZ+
- TLSH T11F758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE