General
- Target 2026-07-27_667b6407ced12ce0fa5209f87b42af81_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- Sample260727-ngwzhsdp2s
- SHA256 aaa206bbddddd4f1f2a8bfd020d465a191e57acc05c7b4ee107ce599f6871551
- MD5 667b6407ced12ce0fa5209f87b42af81
- SHA1 227922309ccb0556447d7df8041e0dd81b00aa26
- SHA512 22647ab4c5044bb98a799ea0bd12045784719c390ff716cc4027335e022b393264c3f71cf3445363261f1b45713b12689a1851894558bbdd72713c99f270c585
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yT9:DlFHU85t0jSbAwhrS9
- TLSH T1E406D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_667b6407ced12ce0fa5209f87b42af81_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_667b6407ced12ce0fa5209f87b42af81_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_667b6407ced12ce0fa5209f87b42af81_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- SHA256 aaa206bbddddd4f1f2a8bfd020d465a191e57acc05c7b4ee107ce599f6871551
- MD5 667b6407ced12ce0fa5209f87b42af81
- SHA1 227922309ccb0556447d7df8041e0dd81b00aa26
- SHA512 22647ab4c5044bb98a799ea0bd12045784719c390ff716cc4027335e022b393264c3f71cf3445363261f1b45713b12689a1851894558bbdd72713c99f270c585
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yT9:DlFHU85t0jSbAwhrS9
- TLSH T1E406D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE