General
- Target 2026-09-29_470806cc2fbe5aa5f522405a99496e1d_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample260930-cglb8stvhy
- SHA256 59480832d3c4abfde31136072a98cefcd28e88b6092322baf5e3fc38513dd659
- MD5 470806cc2fbe5aa5f522405a99496e1d
- SHA1 9b2ee1fe0418cdf717ff4b5c64338ab9bec86d29
- SHA512 9f8b816bd08535f0a06972eda65bf9c6c6ee9d11013b4e4ef9e3cea44c2a7ce20436e863637cd699b0e3ccc6d8a06b7c3f4a6f014b9d477494cd56786d440071
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fy:IylFHUv6ReIt0jSrOVQZy
- TLSH T1FE758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_470806cc2fbe5aa5f522405a99496e1d_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_470806cc2fbe5aa5f522405a99496e1d_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_470806cc2fbe5aa5f522405a99496e1d_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 59480832d3c4abfde31136072a98cefcd28e88b6092322baf5e3fc38513dd659
- MD5 470806cc2fbe5aa5f522405a99496e1d
- SHA1 9b2ee1fe0418cdf717ff4b5c64338ab9bec86d29
- SHA512 9f8b816bd08535f0a06972eda65bf9c6c6ee9d11013b4e4ef9e3cea44c2a7ce20436e863637cd699b0e3ccc6d8a06b7c3f4a6f014b9d477494cd56786d440071
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fy:IylFHUv6ReIt0jSrOVQZy
- TLSH T1FE758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE