General
- Target 2026-10-20_1aaaea5a903d3f42f784428ae6a439b8_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample261020-kppnmaxxcy
- SHA256 05d7f13b83a860fc096a0ad069fc3b47ad101274412551ed5dc4c78f063d571e
- MD5 1aaaea5a903d3f42f784428ae6a439b8
- SHA1 0345b633b4d22ac8862e764381661932572f9ab2
- SHA512 553cee9e1f6d29e3dd7dc8042e29f6e2b2df5bb0df7a1967ae80485945077fae99e3162d345dfd5815de323468b28458394939aa79b2ab65d83910e0d94623e9
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3f0:IylFHUv6ReIt0jSrOVQZ0
- TLSH T1FB758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-20_1aaaea5a903d3f42f784428ae6a439b8_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-20_1aaaea5a903d3f42f784428ae6a439b8_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-20_1aaaea5a903d3f42f784428ae6a439b8_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 05d7f13b83a860fc096a0ad069fc3b47ad101274412551ed5dc4c78f063d571e
- MD5 1aaaea5a903d3f42f784428ae6a439b8
- SHA1 0345b633b4d22ac8862e764381661932572f9ab2
- SHA512 553cee9e1f6d29e3dd7dc8042e29f6e2b2df5bb0df7a1967ae80485945077fae99e3162d345dfd5815de323468b28458394939aa79b2ab65d83910e0d94623e9
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3f0:IylFHUv6ReIt0jSrOVQZ0
- TLSH T1FB758E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE