General
- Target 2026-08-01_42821debf82f98a9cf216a7aeefcf40e_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260801-vmfm2sdn9v
- SHA256 89afeaf1a91c9f49c90679c2d42e9a6254f26e7344e454938a8e7ae52aa3b65c
- MD5 42821debf82f98a9cf216a7aeefcf40e
- SHA1 df733bb630c4d7503b7a38c6ace5349587a0a5b2
- SHA512 2cfb78bdfe838a76d3d3de3c9a37eb06fc844e80e2cd32fdd357eb9b4986711517772376e1cdd01b116844c8c511cd4d29aa1a997a2c46fa6c9c6618d7aa17d4
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fS:IylFHUv6ReIt0jSrOVQZS
- TLSH T17E758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_42821debf82f98a9cf216a7aeefcf40e_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_42821debf82f98a9cf216a7aeefcf40e_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_42821debf82f98a9cf216a7aeefcf40e_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 89afeaf1a91c9f49c90679c2d42e9a6254f26e7344e454938a8e7ae52aa3b65c
- MD5 42821debf82f98a9cf216a7aeefcf40e
- SHA1 df733bb630c4d7503b7a38c6ace5349587a0a5b2
- SHA512 2cfb78bdfe838a76d3d3de3c9a37eb06fc844e80e2cd32fdd357eb9b4986711517772376e1cdd01b116844c8c511cd4d29aa1a997a2c46fa6c9c6618d7aa17d4
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fS:IylFHUv6ReIt0jSrOVQZS
- TLSH T17E758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE