General
- Target 2026-07-05_2991defd8c6fed79f7d4c95d1b363b4e_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 7.0MB
- Sample260705-b7dveab15k
- SHA256 c82889c6f0fd7c28e0d5e02b7bd75c5653404e8678d11a5035a4c8fba41cfacc
- MD5 2991defd8c6fed79f7d4c95d1b363b4e
- SHA1 70400ece4a05290e3aff0d844be0b16278f67266
- SHA512 e1ca31d36a27855f302aa840a1dc21094815adba6ad68194704e2b5cf0f4dc0bb670f8c8d8fe13b7084e6a457073045a09cd68c977f1887aeb62c2429f630158
- SSDEEP 196608:WpRFZTqBtz2zq2+0KqkOF6jtdsMsCOkO:IVTO0b7EdxO
- TLSH T1FF762362B6D144F6D612973088A26B39FB71BB020F35CBD74361CE696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-05_2991defd8c6fed79f7d4c95d1b363b4e_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_2991defd8c6fed79f7d4c95d1b363b4e_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 7.0MB
- SHA256 c82889c6f0fd7c28e0d5e02b7bd75c5653404e8678d11a5035a4c8fba41cfacc
- MD5 2991defd8c6fed79f7d4c95d1b363b4e
- SHA1 70400ece4a05290e3aff0d844be0b16278f67266
- SHA512 e1ca31d36a27855f302aa840a1dc21094815adba6ad68194704e2b5cf0f4dc0bb670f8c8d8fe13b7084e6a457073045a09cd68c977f1887aeb62c2429f630158
- SSDEEP 196608:WpRFZTqBtz2zq2+0KqkOF6jtdsMsCOkO:IVTO0b7EdxO
- TLSH T1FF762362B6D144F6D612973088A26B39FB71BB020F35CBD74361CE696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory