General
- Target 2026-08-30_f4f2a6771c5ffc610fa8dbc1d42c023b_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 5.5MB
- Sample260831-a4c82asfqb
- SHA256 e8c1ac852dca59c004a4bfc9fa1022c2f4d9024281a343566e305a0d69dd605f
- MD5 f4f2a6771c5ffc610fa8dbc1d42c023b
- SHA1 2a74378bef1529e50bd5788089471f1f073caae5
- SHA512 342a9b34085b7228ed0a258e380297011ee47e85f4e6ca5f63ec207ee2fce216a03c79ce02cbc0ba05e73130f0057926cf61a54bd09f9217c254ac5065ac3b81
- SSDEEP 49152:IylFHUv6ReIt0jSrO43CVr5Dt7i+/yTukuFGNLrkBirxsP0:DlFHU85t0jSuPhrSiGdkBirxN
- TLSH T10146A52137FA8224F5BF4B312D76E2D41A77BA66AE10C61F3069460D5D32A428F23777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_f4f2a6771c5ffc610fa8dbc1d42c023b_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_f4f2a6771c5ffc610fa8dbc1d42c023b_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_f4f2a6771c5ffc610fa8dbc1d42c023b_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 5.5MB
- SHA256 e8c1ac852dca59c004a4bfc9fa1022c2f4d9024281a343566e305a0d69dd605f
- MD5 f4f2a6771c5ffc610fa8dbc1d42c023b
- SHA1 2a74378bef1529e50bd5788089471f1f073caae5
- SHA512 342a9b34085b7228ed0a258e380297011ee47e85f4e6ca5f63ec207ee2fce216a03c79ce02cbc0ba05e73130f0057926cf61a54bd09f9217c254ac5065ac3b81
- SSDEEP 49152:IylFHUv6ReIt0jSrO43CVr5Dt7i+/yTukuFGNLrkBirxsP0:DlFHU85t0jSuPhrSiGdkBirxN
- TLSH T10146A52137FA8224F5BF4B312D76E2D41A77BA66AE10C61F3069460D5D32A428F23777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE