General
- Target 2026-08-24_6b7d5bddddc740db8f1f9e3a8d11775d_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260825-m7l2kagh36
- SHA256 585535d7871daf3f1693921f5b4254b1b2d2c38280d4ed6e8087b3dcc744c951
- MD5 6b7d5bddddc740db8f1f9e3a8d11775d
- SHA1 120afcb7e64f825ff48dd81e77e4f6246a6100ee
- SHA512 a185f103a04da33238ee7b108710295068caaa98cf477394939901f070b2fbfb03d51c058a2582ae7260f8d5c555067c72001d9ca15074d0de58a85dc45aab12
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fv:IylFHUv6ReIt0jSrOVQZv
- TLSH T170758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_6b7d5bddddc740db8f1f9e3a8d11775d_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_6b7d5bddddc740db8f1f9e3a8d11775d_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_6b7d5bddddc740db8f1f9e3a8d11775d_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 585535d7871daf3f1693921f5b4254b1b2d2c38280d4ed6e8087b3dcc744c951
- MD5 6b7d5bddddc740db8f1f9e3a8d11775d
- SHA1 120afcb7e64f825ff48dd81e77e4f6246a6100ee
- SHA512 a185f103a04da33238ee7b108710295068caaa98cf477394939901f070b2fbfb03d51c058a2582ae7260f8d5c555067c72001d9ca15074d0de58a85dc45aab12
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fv:IylFHUv6ReIt0jSrOVQZv
- TLSH T170758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE