General
- Target 2026-09-27_70649bc8569782af80c3340de954db24_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260928-fdnvqswwcs
- SHA256 b3ca61735f5ba06d7806839f4406ed0b77dec017f9680bb828a64110695db15a
- MD5 70649bc8569782af80c3340de954db24
- SHA1 ca9347352d63debfa220602ac4205de8468cda4b
- SHA512 7a3133d0914d3bf2714689c1a10195c79326224dcfc6a5e32e875abe321cc2777fd9fac4ad6e68c4ce93cd903901f905fbd81a7f1689727e18e75275dcd5a176
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3f9:IylFHUv6ReIt0jSrOVQZ9
- TLSH T1B0758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-27_70649bc8569782af80c3340de954db24_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-27_70649bc8569782af80c3340de954db24_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-27_70649bc8569782af80c3340de954db24_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 b3ca61735f5ba06d7806839f4406ed0b77dec017f9680bb828a64110695db15a
- MD5 70649bc8569782af80c3340de954db24
- SHA1 ca9347352d63debfa220602ac4205de8468cda4b
- SHA512 7a3133d0914d3bf2714689c1a10195c79326224dcfc6a5e32e875abe321cc2777fd9fac4ad6e68c4ce93cd903901f905fbd81a7f1689727e18e75275dcd5a176
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3f9:IylFHUv6ReIt0jSrOVQZ9
- TLSH T1B0758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE