General
- Target 2026-10-10_2cb16ad4349c57d7c3d9256aacdbe5f7_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- Sample261011-wmtqcaec57
- SHA256 f2be2c0ace699ce7210ade9296f72f43a29805ab12f25a1872de378e2b49e005
- MD5 2cb16ad4349c57d7c3d9256aacdbe5f7
- SHA1 5a1c0c8fad895c9c90be3702f47b7c4fe5c47242
- SHA512 12e7783b175034db743106871fe2d4cb602876ae4bf1db265c63763a44db8fb8cc9f4e684ddc6fc59871d404de089d206c0dfaea186274ada1f90e9c56d08420
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yTL:DlFHU85t0jSbAwhrSL
- TLSH T18706D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-10_2cb16ad4349c57d7c3d9256aacdbe5f7_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_2cb16ad4349c57d7c3d9256aacdbe5f7_coinminer_elex_emotet_icedid_poet-rat_remcos.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_2cb16ad4349c57d7c3d9256aacdbe5f7_coinminer_elex_emotet_icedid_poet-rat_remcos
- Size 3.6MB
- SHA256 f2be2c0ace699ce7210ade9296f72f43a29805ab12f25a1872de378e2b49e005
- MD5 2cb16ad4349c57d7c3d9256aacdbe5f7
- SHA1 5a1c0c8fad895c9c90be3702f47b7c4fe5c47242
- SHA512 12e7783b175034db743106871fe2d4cb602876ae4bf1db265c63763a44db8fb8cc9f4e684ddc6fc59871d404de089d206c0dfaea186274ada1f90e9c56d08420
- SSDEEP 49152:IylFHUv6ReIt0jSrOVQZKVr2Dt7i+/yTL:DlFHU85t0jSbAwhrSL
- TLSH T18706D83037EA5208E5B60B311D7AB6D11A7E7E667E14CA5E3069860CCD32653CB23B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE