General
- Target 2026-07-21_1169c4a11f2d1f67c943df99028c2972_coinminer_elex_emotet_glassworm_icedid_remcos
- Size 10.6MB
- Sample260721-s7kfmaxtdz
- SHA256 d404916eebff3eae2b41b83cbf753ab284c019e3f50f7e11c631d2e3525dbc96
- MD5 1169c4a11f2d1f67c943df99028c2972
- SHA1 92ffcea6d938b92a704f60f560e8370f0b3b856b
- SHA512 f27ec82eb444e1d2406e35381b5335a3f4c339517b429806a3670963591a47c0ee73abc0ac7fd8dcc7b34f861fb71b0787d784e66c086e20a915dfe272e4c2ff
- SSDEEP 196608:do9sdr8m8vYqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKOc7rp:i948vD4F3e+biSDcQwM8uDu
- TLSH T17CB6CF133930DC50E8481BBBD5A6477824662648A8B5C81BF74CFE67BF711235B2FA1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-21_1169c4a11f2d1f67c943df99028c2972_coinminer_elex_emotet_glassworm_icedid_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_1169c4a11f2d1f67c943df99028c2972_coinminer_elex_emotet_glassworm_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_1169c4a11f2d1f67c943df99028c2972_coinminer_elex_emotet_glassworm_icedid_remcos
- Size 10.6MB
- SHA256 d404916eebff3eae2b41b83cbf753ab284c019e3f50f7e11c631d2e3525dbc96
- MD5 1169c4a11f2d1f67c943df99028c2972
- SHA1 92ffcea6d938b92a704f60f560e8370f0b3b856b
- SHA512 f27ec82eb444e1d2406e35381b5335a3f4c339517b429806a3670963591a47c0ee73abc0ac7fd8dcc7b34f861fb71b0787d784e66c086e20a915dfe272e4c2ff
- SSDEEP 196608:do9sdr8m8vYqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKOc7rp:i948vD4F3e+biSDcQwM8uDu
- TLSH T17CB6CF133930DC50E8481BBBD5A6477824662648A8B5C81BF74CFE67BF711235B2FA1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL