General
- Target 2026-07-29_26041c8deb52fb6b88dc4ddb4cb3a594_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260729-wpt4wscf69
- SHA256 4fdc9c9de7c131d358d6a292f59b033477ef956751efb1612121de6c5bf93ffb
- MD5 26041c8deb52fb6b88dc4ddb4cb3a594
- SHA1 757926013a8db077a96a7d45fcc87b01c9eeb036
- SHA512 eb67554ef8ff2a9e226965d714d8523dda7f7fc1803a61d131eecc82d5ea16ba4a5eae83b9f1f17a99b9bd56694bc2f73d5215997721681129ed79b8bea50f76
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3f/:IylFHUv6ReIt0jSrOVQZ/
- TLSH T1CF758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_26041c8deb52fb6b88dc4ddb4cb3a594_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_26041c8deb52fb6b88dc4ddb4cb3a594_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_26041c8deb52fb6b88dc4ddb4cb3a594_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 4fdc9c9de7c131d358d6a292f59b033477ef956751efb1612121de6c5bf93ffb
- MD5 26041c8deb52fb6b88dc4ddb4cb3a594
- SHA1 757926013a8db077a96a7d45fcc87b01c9eeb036
- SHA512 eb67554ef8ff2a9e226965d714d8523dda7f7fc1803a61d131eecc82d5ea16ba4a5eae83b9f1f17a99b9bd56694bc2f73d5215997721681129ed79b8bea50f76
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3f/:IylFHUv6ReIt0jSrOVQZ/
- TLSH T1CF758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE