4f80d22c22dd70c01b62810d98f600a5a8af7f17e964726e11e8f128a1216cf6

Analysis

max time kernel
149s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/10/2026, 19:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-10-13_0f3eda19eeef386ceb2b6c8fb37d6141_coinminer_elex_icedid_stop.exe
Size 2.3MB
Sample261015-yd535aws2n
SHA256 4f80d22c22dd70c01b62810d98f600a5a8af7f17e964726e11e8f128a1216cf6
MD5 0f3eda19eeef386ceb2b6c8fb37d6141
SHA1 c727ece8907e6150b8ff7eb09a327d65a033ecfb
SHA512 6dbdc59516ac5092516dda332c6af0320bc78ce655bbd97bbef9f15c2af8f0f3bfa5aaf57964e5ec3fdbf4e9c2c3a69814a832a0f1b62212e3737737f6c3421a
SSDEEP 49152:yPIAVUjfDTNR9njjbkJ0P5ZTN9VInKcE8aSo:Y/VUjflXAJ0PtGKB
TLSH
T17EB5AFA1E785C377D1428570E0E65BB496D4FC53A3E889A321D03E7CFD7A282362D25B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-10-13_0f3eda19eeef386ceb2b6c8fb37d6141_coinminer_elex_icedid_stop.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
656	Process not Found

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2356	2026-10-13_0f3eda19eeef386ceb2b6c8fb37d6141_coinminer_elex_icedid_stop.exe
2356	2026-10-13_0f3eda19eeef386ceb2b6c8fb37d6141_coinminer_elex_icedid_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-13_0f3eda19eeef386ceb2b6c8fb37d6141_coinminer_elex_icedid_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-13_0f3eda19eeef386ceb2b6c8fb37d6141_coinminer_elex_icedid_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2356

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

cpuz_driver_2356.log

Path C:\Users\Admin\AppData\Local\Temp\cpuz_driver_2356.log
Size 1KB
SHA256 db5e3b4ab875eb0dfade0bab33e1076c5b5eb4c1d194e268a6adf7057929b2c7
MD5 4afe04205fcbe47444a1c93d72825890
SHA1 f164a3b8e97028cbf0d5aacb19a94545260eb7c2
SHA512 092efa86c9c0b52b662940818aee1d4ee17d9106346167b2f3def29942573b58eb20abb9894d64b9f130f98586e6d7baec18b31fa5763a4911b4c8bf135a78f1
TLSH
T18F216A0086D7DB2F48982027BE5BB2CD87FA3DC9166E3B21D794C31865CA85EE590233
MD5 SHA1 SHA512 TLSH

Submit Download