General
- Target 2026-08-06_525a0526c2b34a7b81b8554c90118e4d_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260806-qtgfpsab36
- SHA256 a1859f33f1e365bb008150965c3b8d26b32bbd2095713ce7ac43c7328854c34a
- MD5 525a0526c2b34a7b81b8554c90118e4d
- SHA1 449d42bcc87ce61b282a92f9b43744f9c2b2576c
- SHA512 4b52f9a5ec6592c145addda506f7b774dbb4fa7aa5adb827e3ef967fb5be3b4fb2996e8f034e3abfb940f6a3f5719a0e694ff9cf972fb4f1bed1b0ca28384208
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fv:IylFHUv6ReIt0jSrOVQZv
- TLSH T131758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_525a0526c2b34a7b81b8554c90118e4d_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_525a0526c2b34a7b81b8554c90118e4d_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_525a0526c2b34a7b81b8554c90118e4d_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 a1859f33f1e365bb008150965c3b8d26b32bbd2095713ce7ac43c7328854c34a
- MD5 525a0526c2b34a7b81b8554c90118e4d
- SHA1 449d42bcc87ce61b282a92f9b43744f9c2b2576c
- SHA512 4b52f9a5ec6592c145addda506f7b774dbb4fa7aa5adb827e3ef967fb5be3b4fb2996e8f034e3abfb940f6a3f5719a0e694ff9cf972fb4f1bed1b0ca28384208
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fv:IylFHUv6ReIt0jSrOVQZv
- TLSH T131758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE