General
- Target 2026-07-14_4a46e252f0ec2fddd04a635031e55a7b_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260714-p96j4adv9l
- SHA256 955f8503a9bcdeb55456b54efc7b023f2b7473544940eb616c94ad1fdea415c9
- MD5 4a46e252f0ec2fddd04a635031e55a7b
- SHA1 649d076371386901538a6a44d3c1409290bd9c72
- SHA512 b8c560c4c064e05ee1f983f18abdffdce646bc7de54d6c70c479c61b383de77e2d9d6acbd5c8b572d5543d816acbde56ba446377d983889f1dbba53b4f1c1f9b
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fs:IylFHUv6ReIt0jSrOVQZs
- TLSH T13C758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_4a46e252f0ec2fddd04a635031e55a7b_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_4a46e252f0ec2fddd04a635031e55a7b_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_4a46e252f0ec2fddd04a635031e55a7b_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 955f8503a9bcdeb55456b54efc7b023f2b7473544940eb616c94ad1fdea415c9
- MD5 4a46e252f0ec2fddd04a635031e55a7b
- SHA1 649d076371386901538a6a44d3c1409290bd9c72
- SHA512 b8c560c4c064e05ee1f983f18abdffdce646bc7de54d6c70c479c61b383de77e2d9d6acbd5c8b572d5543d816acbde56ba446377d983889f1dbba53b4f1c1f9b
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fs:IylFHUv6ReIt0jSrOVQZs
- TLSH T13C758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE