General
- Target 2026-08-13_7a2198f3f6451febeaac761263cd4168_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- Sample260813-ws6bbsvsg1
- SHA256 cb8095dcb9120e4275bced31a0559b82dc73f9bfb8f4f4ed4592682fcd9ceefc
- MD5 7a2198f3f6451febeaac761263cd4168
- SHA1 b2e859b38ce3a9cb724c13a113f55c9e72406569
- SHA512 32bdf0ce2e5ecfbed9a4d257a67f0a2b7843c203cb2431a83c38566ff74308b468735fbfa1d50ff697a766db572520d61aaa8271f1e7ee82c8f672061ac7d8b0
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yTQ:DlFHU85t0jSbAwhrSQ
- TLSH T16A06D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_7a2198f3f6451febeaac761263cd4168_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_7a2198f3f6451febeaac761263cd4168_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_7a2198f3f6451febeaac761263cd4168_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- SHA256 cb8095dcb9120e4275bced31a0559b82dc73f9bfb8f4f4ed4592682fcd9ceefc
- MD5 7a2198f3f6451febeaac761263cd4168
- SHA1 b2e859b38ce3a9cb724c13a113f55c9e72406569
- SHA512 32bdf0ce2e5ecfbed9a4d257a67f0a2b7843c203cb2431a83c38566ff74308b468735fbfa1d50ff697a766db572520d61aaa8271f1e7ee82c8f672061ac7d8b0
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yTQ:DlFHU85t0jSbAwhrSQ
- TLSH T16A06D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE