General
- Target 2026-07-03_ed34bd639bd986daf0b5323521fa752c_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 6.9MB
- Sample260703-cws1maas5s
- SHA256 f5100140d20ecb9ed460bf465ac351202746c0c06b53ad8fec9107a08c43ab99
- MD5 ed34bd639bd986daf0b5323521fa752c
- SHA1 ed1b82eae289d4136077218fbdfa285b6fc85484
- SHA512 f876a952999216a6c13d4bd62cef2abcfb9006fbdaf6c2c47aa36b4526e4b02a8a2be35ab0e2202b5273514b4c638e5769e7623fcae9c57518ef7373b369c29d
- SSDEEP 196608:WpRFZTqBtz2zq2+0KqkOF6jtdsMsCOkO:ItTO0b7EdxO
- TLSH T17E762362B6D144F6D612973088A26B39FB71BB020F35CBD74361CE696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-03_ed34bd639bd986daf0b5323521fa752c_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_ed34bd639bd986daf0b5323521fa752c_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 6.9MB
- SHA256 f5100140d20ecb9ed460bf465ac351202746c0c06b53ad8fec9107a08c43ab99
- MD5 ed34bd639bd986daf0b5323521fa752c
- SHA1 ed1b82eae289d4136077218fbdfa285b6fc85484
- SHA512 f876a952999216a6c13d4bd62cef2abcfb9006fbdaf6c2c47aa36b4526e4b02a8a2be35ab0e2202b5273514b4c638e5769e7623fcae9c57518ef7373b369c29d
- SSDEEP 196608:WpRFZTqBtz2zq2+0KqkOF6jtdsMsCOkO:ItTO0b7EdxO
- TLSH T17E762362B6D144F6D612973088A26B39FB71BB020F35CBD74361CE696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory