General
- Target 2026-08-25_e88dd5386c6387e30eb2c8f4bfea4f95_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260826-ext1esgl8y
- SHA256 18c236d56724e86b0edbf5ced4e61d91ce62768248b69a58301abaeb9c3f1ca9
- MD5 e88dd5386c6387e30eb2c8f4bfea4f95
- SHA1 b70e61dc0efd033ca61a59441523db4e28b97613
- SHA512 3d1d911a660b0886b597045422416b60570dd1b559d153d79b249354e3a52c9e30f28181c31aa313a7da52d5a76eaedd3a19a98c0a1309380538856d32bf4b1b
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fY:IylFHUv6ReIt0jSrOVQZY
- TLSH T1CB758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_e88dd5386c6387e30eb2c8f4bfea4f95_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_e88dd5386c6387e30eb2c8f4bfea4f95_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_e88dd5386c6387e30eb2c8f4bfea4f95_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 18c236d56724e86b0edbf5ced4e61d91ce62768248b69a58301abaeb9c3f1ca9
- MD5 e88dd5386c6387e30eb2c8f4bfea4f95
- SHA1 b70e61dc0efd033ca61a59441523db4e28b97613
- SHA512 3d1d911a660b0886b597045422416b60570dd1b559d153d79b249354e3a52c9e30f28181c31aa313a7da52d5a76eaedd3a19a98c0a1309380538856d32bf4b1b
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fY:IylFHUv6ReIt0jSrOVQZY
- TLSH T1CB758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE