General
- Target 2026-08-03_a4f7bd3c2f23c944b8aa51b92f7837ed_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260803-vvj1facg64
- SHA256 925db78c2aff99e03b7967ccc68a11ed1b1d28d8231f222f6b0361314544102e
- MD5 a4f7bd3c2f23c944b8aa51b92f7837ed
- SHA1 ab35bb0e730997580557f1490f70f322bd71a1f3
- SHA512 72f72fbf407ff232a2728174513b48c45c2e1cc5ca840b6bd9edfef7af40a720469ef06883f3c975c71e73e8053d457f51e0b4d152e9256e7744d315afd16a40
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fY:IylFHUv6ReIt0jSrOVQZY
- TLSH T1D4758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_a4f7bd3c2f23c944b8aa51b92f7837ed_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_a4f7bd3c2f23c944b8aa51b92f7837ed_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a4f7bd3c2f23c944b8aa51b92f7837ed_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 925db78c2aff99e03b7967ccc68a11ed1b1d28d8231f222f6b0361314544102e
- MD5 a4f7bd3c2f23c944b8aa51b92f7837ed
- SHA1 ab35bb0e730997580557f1490f70f322bd71a1f3
- SHA512 72f72fbf407ff232a2728174513b48c45c2e1cc5ca840b6bd9edfef7af40a720469ef06883f3c975c71e73e8053d457f51e0b4d152e9256e7744d315afd16a40
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fY:IylFHUv6ReIt0jSrOVQZY
- TLSH T1D4758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE