General
- Target 2026-08-30_660ff8425c9ac46f2702f95c7f67e5ae_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- Sample260831-mex85asvay
- SHA256 8aa1939f294df4bb8e00905a0e88433d7363a92bc88d250c4ee8cdc5523bdd3d
- MD5 660ff8425c9ac46f2702f95c7f67e5ae
- SHA1 cd414c32ab6fa59a36391383a28bd5f96f2452f3
- SHA512 9f6e944c65b8739c5fbfdd96a981b1943661a295655cfe484805edb3345e5983fbc37d29adacf0d96d4167dbbe8c56265a80163de668ffab81c2668c9c719ae9
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yT/:DlFHU85t0jSbAwhrS/
- TLSH T1CB06D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_660ff8425c9ac46f2702f95c7f67e5ae_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_660ff8425c9ac46f2702f95c7f67e5ae_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_660ff8425c9ac46f2702f95c7f67e5ae_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- SHA256 8aa1939f294df4bb8e00905a0e88433d7363a92bc88d250c4ee8cdc5523bdd3d
- MD5 660ff8425c9ac46f2702f95c7f67e5ae
- SHA1 cd414c32ab6fa59a36391383a28bd5f96f2452f3
- SHA512 9f6e944c65b8739c5fbfdd96a981b1943661a295655cfe484805edb3345e5983fbc37d29adacf0d96d4167dbbe8c56265a80163de668ffab81c2668c9c719ae9
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yT/:DlFHU85t0jSbAwhrS/
- TLSH T1CB06D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE