General
- Target 2026-08-15_eea3ac1cffb5938bb1a3d83ab288d3e4_coinminer_elex_emotet_glassworm_remcos_stop
- Size 4.4MB
- Sample260815-hvsala1eld
- SHA256 0b7a74dfbbdc24f7ec19b5d817ed2b9a15d243a843232403120cadc5425b23b7
- MD5 eea3ac1cffb5938bb1a3d83ab288d3e4
- SHA1 9baa6b0c0db28fe5aff92c4a62f9ced0d2143d77
- SHA512 f1f744aadc4d5c3860f1ca126f4388cea5b5aa2c4886562b6355c08d0eeb163c64f23dd9107a9773b67a956efd8229d05d0a04d3a58ab7f85f929af918af6932
- SSDEEP 49152:QyKg2qqkydgeKEVXO4Lc6YwOEgv8u1bkbm7y+aPMiziL9cH+vsS5+O4/v2bhpY:4WyGjEHxYpSu1bkbKy+aPMizHkOl
- TLSH T15A268D01FBCAC1B2DA4702B68C25679D4225AE555F604AD3F35C7F0E9B312D2BD3A24B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_eea3ac1cffb5938bb1a3d83ab288d3e4_coinminer_elex_emotet_glassworm_remcos_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_eea3ac1cffb5938bb1a3d83ab288d3e4_coinminer_elex_emotet_glassworm_remcos_stop
- Size 4.4MB
- SHA256 0b7a74dfbbdc24f7ec19b5d817ed2b9a15d243a843232403120cadc5425b23b7
- MD5 eea3ac1cffb5938bb1a3d83ab288d3e4
- SHA1 9baa6b0c0db28fe5aff92c4a62f9ced0d2143d77
- SHA512 f1f744aadc4d5c3860f1ca126f4388cea5b5aa2c4886562b6355c08d0eeb163c64f23dd9107a9773b67a956efd8229d05d0a04d3a58ab7f85f929af918af6932
- SSDEEP 49152:QyKg2qqkydgeKEVXO4Lc6YwOEgv8u1bkbm7y+aPMiziL9cH+vsS5+O4/v2bhpY:4WyGjEHxYpSu1bkbKy+aPMizHkOl
- TLSH T15A268D01FBCAC1B2DA4702B68C25679D4225AE555F604AD3F35C7F0E9B312D2BD3A24B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory