General
- Target 2026-08-12_c2091a94c7402be9610eae36f8ba9e2b_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260812-1vqe4sfa65
- SHA256 c2fd5038d6e9327004177d6f438761c8824b5f08a8ea2c04d449dc5308c71860
- MD5 c2091a94c7402be9610eae36f8ba9e2b
- SHA1 d88a5480a9823b4e1a295cdc0bb5fa8f43dbb88f
- SHA512 b2fa9d123f79ed0d541322c4f48374d39a020b845543eaaaffbf93671441a98184442716b6d5c3d05f2a17a7147b577f65417a223fa74f367bf7e9173d034270
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fb:IylFHUv6ReIt0jSrOVQZb
- TLSH T161758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_c2091a94c7402be9610eae36f8ba9e2b_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_c2091a94c7402be9610eae36f8ba9e2b_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_c2091a94c7402be9610eae36f8ba9e2b_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 c2fd5038d6e9327004177d6f438761c8824b5f08a8ea2c04d449dc5308c71860
- MD5 c2091a94c7402be9610eae36f8ba9e2b
- SHA1 d88a5480a9823b4e1a295cdc0bb5fa8f43dbb88f
- SHA512 b2fa9d123f79ed0d541322c4f48374d39a020b845543eaaaffbf93671441a98184442716b6d5c3d05f2a17a7147b577f65417a223fa74f367bf7e9173d034270
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fb:IylFHUv6ReIt0jSrOVQZb
- TLSH T161758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE