General
- Target 2026-09-29_b7e0b4f638088ec6a97279f50f04ead0_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- Sample260930-vqnststejc
- SHA256 de9bcce08538df6e9e1e5a61c6cdad46fddce1fae8d2aced8123c6e718ce0aa6
- MD5 b7e0b4f638088ec6a97279f50f04ead0
- SHA1 6e0bdc943efeced01f5eae1940744d2833ffc831
- SHA512 577d06ce44d83860cf92126ea4d29c9baa63f95d8a8be3c02b38745b52599f47d41833e4a0cf32502ee5043dc1628cd57b8b9675c2e450b35ca9793f6b45e2ca
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yTO:DlFHU85t0jSbAwhrSO
- TLSH T1DD06D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_b7e0b4f638088ec6a97279f50f04ead0_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_b7e0b4f638088ec6a97279f50f04ead0_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_b7e0b4f638088ec6a97279f50f04ead0_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- SHA256 de9bcce08538df6e9e1e5a61c6cdad46fddce1fae8d2aced8123c6e718ce0aa6
- MD5 b7e0b4f638088ec6a97279f50f04ead0
- SHA1 6e0bdc943efeced01f5eae1940744d2833ffc831
- SHA512 577d06ce44d83860cf92126ea4d29c9baa63f95d8a8be3c02b38745b52599f47d41833e4a0cf32502ee5043dc1628cd57b8b9675c2e450b35ca9793f6b45e2ca
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yTO:DlFHU85t0jSbAwhrSO
- TLSH T1DD06D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE