General
- Target 2026-08-07_32e50e1bb1b212a5cca2c381f1a81071_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260807-n2matavbnd
- SHA256 dfe0c8bb35384545f9f63b105b03d275662e9a879691ffb1e7ceeac356245c77
- MD5 32e50e1bb1b212a5cca2c381f1a81071
- SHA1 e0e71e60ce4206ecedece1fc836ee2b3a4400a1b
- SHA512 40bdfa5c3ec76e21898a52affdaba7b19757a2ffb7d1d9ba0aa20e09a8ac50bb79811f8535be3245bf9285a802028f2d2dd8040cff5be4149bb72f58a35fdf82
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3f8:IylFHUv6ReIt0jSrOVQZ8
- TLSH T117758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_32e50e1bb1b212a5cca2c381f1a81071_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_32e50e1bb1b212a5cca2c381f1a81071_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_32e50e1bb1b212a5cca2c381f1a81071_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 dfe0c8bb35384545f9f63b105b03d275662e9a879691ffb1e7ceeac356245c77
- MD5 32e50e1bb1b212a5cca2c381f1a81071
- SHA1 e0e71e60ce4206ecedece1fc836ee2b3a4400a1b
- SHA512 40bdfa5c3ec76e21898a52affdaba7b19757a2ffb7d1d9ba0aa20e09a8ac50bb79811f8535be3245bf9285a802028f2d2dd8040cff5be4149bb72f58a35fdf82
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3f8:IylFHUv6ReIt0jSrOVQZ8
- TLSH T117758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE