General
- Target 2026-08-07_664abdb4c9dabf79211ad0b431352d41_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- Sample260807-nrwrhathnc
- SHA256 5574daf3da52f367c6793366237f3803bc7c358518ee05429ff07c4b71353b1e
- MD5 664abdb4c9dabf79211ad0b431352d41
- SHA1 07f53ebeb49e7cd256cc8d89f4d0bce817dd2960
- SHA512 b8cfa075fbee8969ffbac6e9426406f273843fb553eb43524cc2825290d1a34f9a47667f398cf6c5d4ffaa296840956b823d09af0af9d7b32a3a60462005d413
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yTY:DlFHU85t0jSbAwhrSY
- TLSH T13806D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_664abdb4c9dabf79211ad0b431352d41_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_664abdb4c9dabf79211ad0b431352d41_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_664abdb4c9dabf79211ad0b431352d41_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- SHA256 5574daf3da52f367c6793366237f3803bc7c358518ee05429ff07c4b71353b1e
- MD5 664abdb4c9dabf79211ad0b431352d41
- SHA1 07f53ebeb49e7cd256cc8d89f4d0bce817dd2960
- SHA512 b8cfa075fbee8969ffbac6e9426406f273843fb553eb43524cc2825290d1a34f9a47667f398cf6c5d4ffaa296840956b823d09af0af9d7b32a3a60462005d413
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yTY:DlFHU85t0jSbAwhrSY
- TLSH T13806D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE