General
- Target 2026-08-01_9253a4fbdf418e60032e86e4f4e1499c_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260801-ts6wraszes
- SHA256 9cafb6c1384f88dcceb676559abc9edc5a45a1a6c93479b5e4f168a27a0e9a02
- MD5 9253a4fbdf418e60032e86e4f4e1499c
- SHA1 ab1e266dcc61cb6b3c3e37e34e0eebfb4b8b326c
- SHA512 ee21eb213895c1299eebe94894c02026ca163d05f6580f470e1827f69efcabfb274d8cf296db784e53d50447088b6a0523d7f564854539947c9e07275c10ae77
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fk:IylFHUv6ReIt0jSrOVQZk
- TLSH T189758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_9253a4fbdf418e60032e86e4f4e1499c_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_9253a4fbdf418e60032e86e4f4e1499c_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_9253a4fbdf418e60032e86e4f4e1499c_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 9cafb6c1384f88dcceb676559abc9edc5a45a1a6c93479b5e4f168a27a0e9a02
- MD5 9253a4fbdf418e60032e86e4f4e1499c
- SHA1 ab1e266dcc61cb6b3c3e37e34e0eebfb4b8b326c
- SHA512 ee21eb213895c1299eebe94894c02026ca163d05f6580f470e1827f69efcabfb274d8cf296db784e53d50447088b6a0523d7f564854539947c9e07275c10ae77
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fk:IylFHUv6ReIt0jSrOVQZk
- TLSH T189758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE