General
- Target 2026-11-12_4c2f2924d0394cc1ae2c68781004cf94_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- Sample261113-d5afbafs8x
- SHA256 c049a2c9b4162b7bf94f179cdb671ba47792df185f6e2b7103e202b53b5df3ca
- MD5 4c2f2924d0394cc1ae2c68781004cf94
- SHA1 3d46920776167bd3c808e1c97a3c388214ff4796
- SHA512 27820b8ca822e0128fa062aa59bad93febbfb673ff9c30bd573f2e63eb43034711e7eb27c1be89a1df69d75385713b9000cbb6cabfb568ea27bb47d4f7fbf916
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3f6:IylFHUv6ReIt0jSrOVQZ6
- TLSH T1C1757E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-12_4c2f2924d0394cc1ae2c68781004cf94_coinminer_elex_emotet_icedid_remcos.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-12_4c2f2924d0394cc1ae2c68781004cf94_coinminer_elex_emotet_icedid_remcos.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-12_4c2f2924d0394cc1ae2c68781004cf94_coinminer_elex_emotet_icedid_remcos
- Size 1.5MB
- SHA256 c049a2c9b4162b7bf94f179cdb671ba47792df185f6e2b7103e202b53b5df3ca
- MD5 4c2f2924d0394cc1ae2c68781004cf94
- SHA1 3d46920776167bd3c808e1c97a3c388214ff4796
- SHA512 27820b8ca822e0128fa062aa59bad93febbfb673ff9c30bd573f2e63eb43034711e7eb27c1be89a1df69d75385713b9000cbb6cabfb568ea27bb47d4f7fbf916
- SSDEEP 24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb2kQ90+L7ZCy3f6:IylFHUv6ReIt0jSrOVQZ6
- TLSH T1C1757E21729D8264C5A90670297F73B12A3D7B2B3F24CA5F7395CE1C5D326538F2236A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE