General
- Target 2026-07-27_8e8add2999f38b12251ccfaa0d2e8e89_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260727-qa82lsshjd
- SHA256 6e08483908329d60fcd1035412ba56b8f51d317849e0134202e7734055b06d3f
- MD5 8e8add2999f38b12251ccfaa0d2e8e89
- SHA1 ad32ad9941a3ee741e36f6794a8d1fef006a0a6e
- SHA512 68bdb92c967e002e541b9556a2d96536e1a4d96f7b94bb5624d58fc2ffdfbbfe9c57d9f2e16a17eeee5b0c734b5a8b4b00a2830445811739d30ed468c7ff5c2c
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fP:IylFHUv6ReIt0jSrOVQZP
- TLSH T1CF758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_8e8add2999f38b12251ccfaa0d2e8e89_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_8e8add2999f38b12251ccfaa0d2e8e89_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_8e8add2999f38b12251ccfaa0d2e8e89_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 6e08483908329d60fcd1035412ba56b8f51d317849e0134202e7734055b06d3f
- MD5 8e8add2999f38b12251ccfaa0d2e8e89
- SHA1 ad32ad9941a3ee741e36f6794a8d1fef006a0a6e
- SHA512 68bdb92c967e002e541b9556a2d96536e1a4d96f7b94bb5624d58fc2ffdfbbfe9c57d9f2e16a17eeee5b0c734b5a8b4b00a2830445811739d30ed468c7ff5c2c
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fP:IylFHUv6ReIt0jSrOVQZP
- TLSH T1CF758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE