General
- Target 2026-07-11_80cd3a0ad05cf6bb819f0bc37a468aba_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- Sample260711-e2m3nsdx7s
- SHA256 cb2b3217523555d541ee06b6e1a391ffcb9fb83f77e2bf1e7653c9ead344f119
- MD5 80cd3a0ad05cf6bb819f0bc37a468aba
- SHA1 72b0f5f9371998ce547a5bea5a7386841552a73b
- SHA512 b99851b05aec60efbd8d09961aeef63be0d57f5e354c253895a3f0f32af5953425e4b97e3c8924ca9564b096425ce64f55d831860ed316e1295b6d4dbdabbd41
- SSDEEP 196608:WpRF6TqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:IeTO0b7EdxO7Edx
- TLSH T16E962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-11_80cd3a0ad05cf6bb819f0bc37a468aba_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_80cd3a0ad05cf6bb819f0bc37a468aba_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- SHA256 cb2b3217523555d541ee06b6e1a391ffcb9fb83f77e2bf1e7653c9ead344f119
- MD5 80cd3a0ad05cf6bb819f0bc37a468aba
- SHA1 72b0f5f9371998ce547a5bea5a7386841552a73b
- SHA512 b99851b05aec60efbd8d09961aeef63be0d57f5e354c253895a3f0f32af5953425e4b97e3c8924ca9564b096425ce64f55d831860ed316e1295b6d4dbdabbd41
- SSDEEP 196608:WpRF6TqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:IeTO0b7EdxO7Edx
- TLSH T16E962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory