General
- Target 2026-08-08_3d0b6520d2134f057b8da8236abeb319_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 5.5MB
- Sample260808-n3fjnawdpd
- SHA256 3097e8b517811d6620d59f0ea9745aa955f9a108d5b13686c5549682daf70f39
- MD5 3d0b6520d2134f057b8da8236abeb319
- SHA1 9f728b5930a18a54822bdaa038f2c460d46a03ec
- SHA512 b78100e2947689e3516667365464676f5f288be7c0ebf3bf07465496252929e48fb2c5e44ce707435317699a85ce5d0f028e9f0afa3cceca37de6dc8a00c78cf
- SSDEEP 49152:IylFHUv6ReIt0jSrO43CVr5Dt7i+/yTukuFGNLrkBirxsPq:DlFHU85t0jSuPhrSiGdkBirxD
- TLSH T1BF46A52137FA8224F5BF4B312D76E2D41A77BA66AE10C61F3069460D5D32A428F23777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_3d0b6520d2134f057b8da8236abeb319_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_3d0b6520d2134f057b8da8236abeb319_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_3d0b6520d2134f057b8da8236abeb319_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 5.5MB
- SHA256 3097e8b517811d6620d59f0ea9745aa955f9a108d5b13686c5549682daf70f39
- MD5 3d0b6520d2134f057b8da8236abeb319
- SHA1 9f728b5930a18a54822bdaa038f2c460d46a03ec
- SHA512 b78100e2947689e3516667365464676f5f288be7c0ebf3bf07465496252929e48fb2c5e44ce707435317699a85ce5d0f028e9f0afa3cceca37de6dc8a00c78cf
- SSDEEP 49152:IylFHUv6ReIt0jSrO43CVr5Dt7i+/yTukuFGNLrkBirxsPq:DlFHU85t0jSuPhrSiGdkBirxD
- TLSH T1BF46A52137FA8224F5BF4B312D76E2D41A77BA66AE10C61F3069460D5D32A428F23777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE