General
- Target 2026-08-02_28fa3bd246424753f63071b7af323ce5_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260803-dyfnrabn7y
- SHA256 b229bcfb4e6792c0e816fa6fc39e8d718ec2d8107611d215f1edf7d79be8357a
- MD5 28fa3bd246424753f63071b7af323ce5
- SHA1 46b9019ff490e0e9c65cb08938e34e11167808b6
- SHA512 44440fefaa551cd3f0cb711ee893246cff140a9d794b878d99c46af15616c1c6bae63b7bb2303ce45f0c309639d9ef4627e4c7bef75a3875597b4e85a9e4749f
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fH:IylFHUv6ReIt0jSrOVQZH
- TLSH T12A758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_28fa3bd246424753f63071b7af323ce5_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_28fa3bd246424753f63071b7af323ce5_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_28fa3bd246424753f63071b7af323ce5_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 b229bcfb4e6792c0e816fa6fc39e8d718ec2d8107611d215f1edf7d79be8357a
- MD5 28fa3bd246424753f63071b7af323ce5
- SHA1 46b9019ff490e0e9c65cb08938e34e11167808b6
- SHA512 44440fefaa551cd3f0cb711ee893246cff140a9d794b878d99c46af15616c1c6bae63b7bb2303ce45f0c309639d9ef4627e4c7bef75a3875597b4e85a9e4749f
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fH:IylFHUv6ReIt0jSrOVQZH
- TLSH T12A758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE