General
- Target 2026-06-02_6aff9c688d7ec2f526721ec77a08b2de_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.3MB
- Sample260602-3y6bvae16v
- SHA256 b9046063172165cbeb61e97f784d01c2dd08e166ead5c4a607f82fd9fe5fc954
- MD5 6aff9c688d7ec2f526721ec77a08b2de
- SHA1 d05af86aa8cc17c3e76686543f20202e67dfba4f
- SHA512 45846fbc8a312d9a5a8721d2981d429743f684ec0780526c0bd71a78a43ffa7050d4930af981ea31428dc4d4ba7828da4aff0220561c8b1ac23e97c2a8df21f3
- SSDEEP 196608:WpRFBTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMs:IVTO0b7EdxO7Ed
- TLSH T19F962362B69140F6D612973088A26B39FB71BB420F31CBD74361CF696D33690EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-02_6aff9c688d7ec2f526721ec77a08b2de_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_6aff9c688d7ec2f526721ec77a08b2de_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.3MB
- SHA256 b9046063172165cbeb61e97f784d01c2dd08e166ead5c4a607f82fd9fe5fc954
- MD5 6aff9c688d7ec2f526721ec77a08b2de
- SHA1 d05af86aa8cc17c3e76686543f20202e67dfba4f
- SHA512 45846fbc8a312d9a5a8721d2981d429743f684ec0780526c0bd71a78a43ffa7050d4930af981ea31428dc4d4ba7828da4aff0220561c8b1ac23e97c2a8df21f3
- SSDEEP 196608:WpRFBTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMs:IVTO0b7EdxO7Ed
- TLSH T19F962362B69140F6D612973088A26B39FB71BB420F31CBD74361CF696D33690EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory