General
- Target 2026-08-07_2a64fd5f547e64b9ebf1adc5cee9cd60_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260807-rmrtjazwbv
- SHA256 25752760e234fca021f525bc59a10c6766e66c0615fc3027fe7c9034ed78a59e
- MD5 2a64fd5f547e64b9ebf1adc5cee9cd60
- SHA1 64223991ff31dd4c2b2c4b3a0919eb85cdea57b5
- SHA512 997705a8a1c5c7fe249501b47bbceaea5bc2a7b8f245aae0f4c8fb5054cb3c9d1623587d9a8089a5a6577d7456c2b8fa6017951bfbf744ad1c658d23faa78ed3
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3f2:IylFHUv6ReIt0jSrOVQZ2
- TLSH T1F7758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_2a64fd5f547e64b9ebf1adc5cee9cd60_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_2a64fd5f547e64b9ebf1adc5cee9cd60_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_2a64fd5f547e64b9ebf1adc5cee9cd60_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 25752760e234fca021f525bc59a10c6766e66c0615fc3027fe7c9034ed78a59e
- MD5 2a64fd5f547e64b9ebf1adc5cee9cd60
- SHA1 64223991ff31dd4c2b2c4b3a0919eb85cdea57b5
- SHA512 997705a8a1c5c7fe249501b47bbceaea5bc2a7b8f245aae0f4c8fb5054cb3c9d1623587d9a8089a5a6577d7456c2b8fa6017951bfbf744ad1c658d23faa78ed3
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3f2:IylFHUv6ReIt0jSrOVQZ2
- TLSH T1F7758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE