General
- Target 2026-08-05_21f08a9e5f29dccb862a3afcc3d6fb32_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- Sample260805-trpabawvht
- SHA256 2299e485903c93a40326f7b71a1445985a82d569f1dd3eba8ec3eb26a319e27d
- MD5 21f08a9e5f29dccb862a3afcc3d6fb32
- SHA1 dc935abdc17b549e7ee399b236e7586e9225fc4d
- SHA512 946047d042754b4e6cb2c9c0dd4fc8e2c3de08a5d916e21a0aa0a32ff936afea83b05a3b391fc485c09b83476f7faaf3ebe04a7d1fed3fec8dd5facea8e64357
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yT+:DlFHU85t0jSbAwhrS+
- TLSH T14306D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_21f08a9e5f29dccb862a3afcc3d6fb32_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_21f08a9e5f29dccb862a3afcc3d6fb32_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_21f08a9e5f29dccb862a3afcc3d6fb32_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- SHA256 2299e485903c93a40326f7b71a1445985a82d569f1dd3eba8ec3eb26a319e27d
- MD5 21f08a9e5f29dccb862a3afcc3d6fb32
- SHA1 dc935abdc17b549e7ee399b236e7586e9225fc4d
- SHA512 946047d042754b4e6cb2c9c0dd4fc8e2c3de08a5d916e21a0aa0a32ff936afea83b05a3b391fc485c09b83476f7faaf3ebe04a7d1fed3fec8dd5facea8e64357
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yT+:DlFHU85t0jSbAwhrS+
- TLSH T14306D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE