General
- Target 2026-08-04_c131086276fde68e2a9fcb30d5d88ce1_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260804-f9p3nsdf79
- SHA256 e8b1c6835248c21327359f371dca02fe667fc0be55e415ca207a9a63db9009dd
- MD5 c131086276fde68e2a9fcb30d5d88ce1
- SHA1 edd87bb513a29a3781a8e16d2331d6b274ac1867
- SHA512 d03e37a8029085073cbd1d585a53f8b9d095b1861c3e6539fa7f7d906e2c69c84a186909af94f6d8e3048b29e1321f5d9d88fc7cc7e3589322b57508f4c7a1c3
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fu:IylFHUv6ReIt0jSrOVQZu
- TLSH T1C0758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_c131086276fde68e2a9fcb30d5d88ce1_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_c131086276fde68e2a9fcb30d5d88ce1_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_c131086276fde68e2a9fcb30d5d88ce1_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 e8b1c6835248c21327359f371dca02fe667fc0be55e415ca207a9a63db9009dd
- MD5 c131086276fde68e2a9fcb30d5d88ce1
- SHA1 edd87bb513a29a3781a8e16d2331d6b274ac1867
- SHA512 d03e37a8029085073cbd1d585a53f8b9d095b1861c3e6539fa7f7d906e2c69c84a186909af94f6d8e3048b29e1321f5d9d88fc7cc7e3589322b57508f4c7a1c3
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fu:IylFHUv6ReIt0jSrOVQZu
- TLSH T1C0758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE