General
- Target 2026-07-27_f0a6351346aca0fd4b91a36a1937398a_coinminer_elex_emotet_glassworm_icedid_remcos
- Size 10.4MB
- Sample260727-3bs31atzgv
- SHA256 afa945b99a4644a49f73f42f651913429940c08afdaeaed08844a40a623477fb
- MD5 f0a6351346aca0fd4b91a36a1937398a
- SHA1 44acf275f7f5048362c0ad791a4d6bff72218bc8
- SHA512 2eaa0e690ef828d5d83bc01f20cee0663f1d66e544a3f79662aaa66aa1ba8297904ff86623b1fd838b2150074caeecc45a3433c5713aab1236f29b165f1478c0
- SSDEEP 196608:+DLbw580YqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKOx7m:cw580D4F3e+biSDcQwM8uDu1
- TLSH T193B6BF133630DC50E9490B7BD6A2433428762694A8F6C417FB4CBE67BB711136B6EB1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-27_f0a6351346aca0fd4b91a36a1937398a_coinminer_elex_emotet_glassworm_icedid_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_f0a6351346aca0fd4b91a36a1937398a_coinminer_elex_emotet_glassworm_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_f0a6351346aca0fd4b91a36a1937398a_coinminer_elex_emotet_glassworm_icedid_remcos
- Size 10.4MB
- SHA256 afa945b99a4644a49f73f42f651913429940c08afdaeaed08844a40a623477fb
- MD5 f0a6351346aca0fd4b91a36a1937398a
- SHA1 44acf275f7f5048362c0ad791a4d6bff72218bc8
- SHA512 2eaa0e690ef828d5d83bc01f20cee0663f1d66e544a3f79662aaa66aa1ba8297904ff86623b1fd838b2150074caeecc45a3433c5713aab1236f29b165f1478c0
- SSDEEP 196608:+DLbw580YqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKOx7m:cw580D4F3e+biSDcQwM8uDu1
- TLSH T193B6BF133630DC50E9490B7BD6A2433428762694A8F6C417FB4CBE67BB711136B6EB1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL