General
- Target 2026-08-08_bd5c37851bc9a1ceb8c1d66c836325dd_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- Sample260808-dap8aa1ycv
- SHA256 b17ef48889535908ba14fe999d352ae87391dfc8bd1cd7ef665119e312494a50
- MD5 bd5c37851bc9a1ceb8c1d66c836325dd
- SHA1 b1bd16b3e60aaa89fecfa989cdbee8278c57bfe3
- SHA512 a566b1ae79df39b07d58a6fc05a2f7644ad5fab767ec71ca3b03404a0526e0b7216ad9fd9005a0b81ff7ea93fb24cdc96148b3d71f36b9e86dce5d6f43beca95
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yTe:DlFHU85t0jSbAwhrSe
- TLSH T1DA06D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_bd5c37851bc9a1ceb8c1d66c836325dd_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_bd5c37851bc9a1ceb8c1d66c836325dd_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_bd5c37851bc9a1ceb8c1d66c836325dd_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- SHA256 b17ef48889535908ba14fe999d352ae87391dfc8bd1cd7ef665119e312494a50
- MD5 bd5c37851bc9a1ceb8c1d66c836325dd
- SHA1 b1bd16b3e60aaa89fecfa989cdbee8278c57bfe3
- SHA512 a566b1ae79df39b07d58a6fc05a2f7644ad5fab767ec71ca3b03404a0526e0b7216ad9fd9005a0b81ff7ea93fb24cdc96148b3d71f36b9e86dce5d6f43beca95
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yTe:DlFHU85t0jSbAwhrSe
- TLSH T1DA06D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE