General
- Target 2026-07-02_3ef4706aff7d84b35dbd34ae00a6ceb8_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- Sample260702-cnbrdaa15w
- SHA256 20684de93b5086cb35eea8ed02826f8f39bb643c1919b1e4636b6752a6501b02
- MD5 3ef4706aff7d84b35dbd34ae00a6ceb8
- SHA1 5cbeec9532c8c850c1c73b7d02070948f47fe54a
- SHA512 30d21a7cec58e52fcd54c43d25888d93ddd3fabd8ac1c62c40f1f73bf38feed7c55a64f9af53c4b1deacc764d5acd64351a4ebbb3f0b30ce6f215bee11a0d5eb
- SSDEEP 196608:WpRFoTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:IUTO0b7EdxO7Edx
- TLSH T121962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-02_3ef4706aff7d84b35dbd34ae00a6ceb8_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_3ef4706aff7d84b35dbd34ae00a6ceb8_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- SHA256 20684de93b5086cb35eea8ed02826f8f39bb643c1919b1e4636b6752a6501b02
- MD5 3ef4706aff7d84b35dbd34ae00a6ceb8
- SHA1 5cbeec9532c8c850c1c73b7d02070948f47fe54a
- SHA512 30d21a7cec58e52fcd54c43d25888d93ddd3fabd8ac1c62c40f1f73bf38feed7c55a64f9af53c4b1deacc764d5acd64351a4ebbb3f0b30ce6f215bee11a0d5eb
- SSDEEP 196608:WpRFoTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:IUTO0b7EdxO7Edx
- TLSH T121962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory