General
- Target 2026-08-14_3a0aba7290c8993bc21c65e04ed522f1_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- Sample260814-1wdspscc43
- SHA256 a54fb35e5a4aefcdc49f724447691b66b13ba482e32385eb634b78d3d5dddd01
- MD5 3a0aba7290c8993bc21c65e04ed522f1
- SHA1 80db078f5e2ce5e53183487e8f0e2c1bbc1fce4a
- SHA512 562b9527dc5c7f22d73e4a37c998deef96bc6caca4f75d7d69152536a292a9096627b02df1252c2c5fb0dd9012f7e06cfd5807cc8c53dafc6069ff3b341082ed
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yTE:DlFHU85t0jSbAwhrSE
- TLSH T14406D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_3a0aba7290c8993bc21c65e04ed522f1_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_3a0aba7290c8993bc21c65e04ed522f1_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_3a0aba7290c8993bc21c65e04ed522f1_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- SHA256 a54fb35e5a4aefcdc49f724447691b66b13ba482e32385eb634b78d3d5dddd01
- MD5 3a0aba7290c8993bc21c65e04ed522f1
- SHA1 80db078f5e2ce5e53183487e8f0e2c1bbc1fce4a
- SHA512 562b9527dc5c7f22d73e4a37c998deef96bc6caca4f75d7d69152536a292a9096627b02df1252c2c5fb0dd9012f7e06cfd5807cc8c53dafc6069ff3b341082ed
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yTE:DlFHU85t0jSbAwhrSE
- TLSH T14406D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE