General
- Target 2026-08-09_feac26cc69951e1fb5bd750dcbfdc1b4_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260809-phtffs1sbx
- SHA256 626826ccf483ca2fb6af0ca8b62acbb2f7322a1bd73c062e54fce14c43e1639a
- MD5 feac26cc69951e1fb5bd750dcbfdc1b4
- SHA1 f4d9a340e99e6293dd6bfae29daf2289e9ea88af
- SHA512 0f71b9efbaac638dd6a3022c30f25fde9e34c7da24ca8e6303952bc56ccd1292cf7d9b76ee5521bfd388ccc5d623776cf908ee2462c5c2e83f45fc76d566e321
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fc:IylFHUv6ReIt0jSrOVQZc
- TLSH T1CF758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_feac26cc69951e1fb5bd750dcbfdc1b4_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_feac26cc69951e1fb5bd750dcbfdc1b4_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_feac26cc69951e1fb5bd750dcbfdc1b4_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 626826ccf483ca2fb6af0ca8b62acbb2f7322a1bd73c062e54fce14c43e1639a
- MD5 feac26cc69951e1fb5bd750dcbfdc1b4
- SHA1 f4d9a340e99e6293dd6bfae29daf2289e9ea88af
- SHA512 0f71b9efbaac638dd6a3022c30f25fde9e34c7da24ca8e6303952bc56ccd1292cf7d9b76ee5521bfd388ccc5d623776cf908ee2462c5c2e83f45fc76d566e321
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fc:IylFHUv6ReIt0jSrOVQZc
- TLSH T1CF758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE