General
- Target 2026-10-02_f6eadaa1001f351a4f4000b81a61c2db_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample261002-18ldbathnc
- SHA256 80fbe7bf01db41068eed0aaad924315fd3c8a02cfee2323f386c85797d527803
- MD5 f6eadaa1001f351a4f4000b81a61c2db
- SHA1 74255027e48db72f36f2499d524fa75f5c8e8f23
- SHA512 13c0df29230cd59a1fa0422abc0f2ff59ce29feb48c15f6ec1aa6591e754a9233515b6073c9b35828a8b7fa58f29994bb12bde2da15c847c3748ae4133912c1d
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fn:IylFHUv6ReIt0jSrOVQZn
- TLSH T1A8758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_f6eadaa1001f351a4f4000b81a61c2db_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_f6eadaa1001f351a4f4000b81a61c2db_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_f6eadaa1001f351a4f4000b81a61c2db_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 80fbe7bf01db41068eed0aaad924315fd3c8a02cfee2323f386c85797d527803
- MD5 f6eadaa1001f351a4f4000b81a61c2db
- SHA1 74255027e48db72f36f2499d524fa75f5c8e8f23
- SHA512 13c0df29230cd59a1fa0422abc0f2ff59ce29feb48c15f6ec1aa6591e754a9233515b6073c9b35828a8b7fa58f29994bb12bde2da15c847c3748ae4133912c1d
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3fn:IylFHUv6ReIt0jSrOVQZn
- TLSH T1A8758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE