General
- Target 2026-07-11_8f1abdee3d5d5e8925d53cc20d70d634_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 6.8MB
- Sample260711-ezjbpsdx4w
- SHA256 de541838791ca9f41bbf4e6d51386b162287160948e83161abe15cfffa94f14d
- MD5 8f1abdee3d5d5e8925d53cc20d70d634
- SHA1 f0f18b5692c43baf66c2d4b1f523d879b2a74fc1
- SHA512 b0ab8ae523b0d0dae5d7ed3bc9251ebee78475602662750a0af99a60317c927ad320721bb3bb57b4e0e6b82e12239c196abd1e8a6f023231558733ea08f072ef
- SSDEEP 196608:WpRFHTqBtz2zq2+0KqkOF6jtdsMsCOkO:IrTO0b7EdxO
- TLSH T126762262B6D144F6D612873088A26B39FB71BB420F35CBD74361CE696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-11_8f1abdee3d5d5e8925d53cc20d70d634_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_8f1abdee3d5d5e8925d53cc20d70d634_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 6.8MB
- SHA256 de541838791ca9f41bbf4e6d51386b162287160948e83161abe15cfffa94f14d
- MD5 8f1abdee3d5d5e8925d53cc20d70d634
- SHA1 f0f18b5692c43baf66c2d4b1f523d879b2a74fc1
- SHA512 b0ab8ae523b0d0dae5d7ed3bc9251ebee78475602662750a0af99a60317c927ad320721bb3bb57b4e0e6b82e12239c196abd1e8a6f023231558733ea08f072ef
- SSDEEP 196608:WpRFHTqBtz2zq2+0KqkOF6jtdsMsCOkO:IrTO0b7EdxO
- TLSH T126762262B6D144F6D612873088A26B39FB71BB420F35CBD74361CE696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory