General
- Target 2026-08-31_f81a12a03568990a81fe57b928849f4a_coinminer_elex_emotet_glassworm_icedid_remcos
- Size 10.3MB
- Sample260831-pttklavthw
- SHA256 509b1a58240e3bc31aee830f3ec7135e183229761b934c10cf7bf36afef8f092
- MD5 f81a12a03568990a81fe57b928849f4a
- SHA1 8bd76987552c7632aff2945115483b236fa48867
- SHA512 84dc913ef3bb3e4b852cc945ade77062af7a6647ee982df04f9784ab2b3e9b37c205e70cfe53235d627ab875d3c87bcda1fe90a64632e3a96d4e40f80fb4e310
- SSDEEP 196608:70pMQB82YqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKOI7U:7cMQB82D4F3e+biSDcQwM8uDuw
- TLSH T1DAB6CF133530DC55E8880B7BD9A24378247A6644A8B6C417FB1CAE6BBF704135B6FA1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-31_f81a12a03568990a81fe57b928849f4a_coinminer_elex_emotet_glassworm_icedid_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-31_f81a12a03568990a81fe57b928849f4a_coinminer_elex_emotet_glassworm_icedid_remcos.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_f81a12a03568990a81fe57b928849f4a_coinminer_elex_emotet_glassworm_icedid_remcos
- Size 10.3MB
- SHA256 509b1a58240e3bc31aee830f3ec7135e183229761b934c10cf7bf36afef8f092
- MD5 f81a12a03568990a81fe57b928849f4a
- SHA1 8bd76987552c7632aff2945115483b236fa48867
- SHA512 84dc913ef3bb3e4b852cc945ade77062af7a6647ee982df04f9784ab2b3e9b37c205e70cfe53235d627ab875d3c87bcda1fe90a64632e3a96d4e40f80fb4e310
- SSDEEP 196608:70pMQB82YqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKOI7U:7cMQB82D4F3e+biSDcQwM8uDuw
- TLSH T1DAB6CF133530DC55E8880B7BD9A24378247A6644A8B6C417FB1CAE6BBF704135B6FA1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL