General
- Target 2026-08-08_aa9cc23d35b5d5172f1e31d885dd39b0_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260808-nn5v1aem4v
- SHA256 721274c4100ec3f587d68abe921e70ec86e06b8af81275654358efd475c2e68d
- MD5 aa9cc23d35b5d5172f1e31d885dd39b0
- SHA1 f23ef9e0b8bb938359dc918122402a40a5576e29
- SHA512 2a54b399a37d0e6877ea0ed2d979e7616b452945e0579854d0802cdc1f2e2766b9ad5ad6a8d53c47f677e71009f9a5c9ed52d327a838f127ef39f15d82cabb3f
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fS:IylFHUv6ReIt0jSrOVQZS
- TLSH T19E757E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_aa9cc23d35b5d5172f1e31d885dd39b0_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_aa9cc23d35b5d5172f1e31d885dd39b0_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_aa9cc23d35b5d5172f1e31d885dd39b0_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 721274c4100ec3f587d68abe921e70ec86e06b8af81275654358efd475c2e68d
- MD5 aa9cc23d35b5d5172f1e31d885dd39b0
- SHA1 f23ef9e0b8bb938359dc918122402a40a5576e29
- SHA512 2a54b399a37d0e6877ea0ed2d979e7616b452945e0579854d0802cdc1f2e2766b9ad5ad6a8d53c47f677e71009f9a5c9ed52d327a838f127ef39f15d82cabb3f
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fS:IylFHUv6ReIt0jSrOVQZS
- TLSH T19E757E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE