General
- Target 2026-09-28_54b9b904149ea1798f88833dde27238d_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260928-s7vllaytes
- SHA256 c46e7938ba880a7c978675e55e30f9a97bb6d92bf725cbdb9d32ae5d11da8f89
- MD5 54b9b904149ea1798f88833dde27238d
- SHA1 078796f79d6e2d6e3fd9d0525d22b03a5745f87e
- SHA512 b7d4aa517c17b54afaffe688090277ec94c72040d2532eaee43db48f526edd7ed877d21e44a2827b61e9c5a60dbf4b879468ae0aa677f3c42527e1d5a4a71ca5
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fx:IylFHUv6ReIt0jSrOVQZx
- TLSH T1E9758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-28_54b9b904149ea1798f88833dde27238d_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-28_54b9b904149ea1798f88833dde27238d_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-28_54b9b904149ea1798f88833dde27238d_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 c46e7938ba880a7c978675e55e30f9a97bb6d92bf725cbdb9d32ae5d11da8f89
- MD5 54b9b904149ea1798f88833dde27238d
- SHA1 078796f79d6e2d6e3fd9d0525d22b03a5745f87e
- SHA512 b7d4aa517c17b54afaffe688090277ec94c72040d2532eaee43db48f526edd7ed877d21e44a2827b61e9c5a60dbf4b879468ae0aa677f3c42527e1d5a4a71ca5
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fx:IylFHUv6ReIt0jSrOVQZx
- TLSH T1E9758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE