General
- Target 2026-07-11_5d73ca9fb983f8393d6a66996b60d71c_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- Sample260711-tt7vfaez5k
- SHA256 bb7c8154e3db9ab36a241d3f824bc88341847ecbbd8b20a3a0ff69715b668482
- MD5 5d73ca9fb983f8393d6a66996b60d71c
- SHA1 ef93b8283258bb470ee85f236278544fe8a2d803
- SHA512 40ae06b0fd5c9904aa0b20e9c5f3f48bb79762ea6cfa67fb88bd3e5e517fa89745e110c4c25392e07424f2721742bcfd2878869ba294b39077c4e230ffb3e43d
- SSDEEP 196608:WpRFoTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:IsTO0b7EdxO7Edx
- TLSH T15F962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-11_5d73ca9fb983f8393d6a66996b60d71c_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_5d73ca9fb983f8393d6a66996b60d71c_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- SHA256 bb7c8154e3db9ab36a241d3f824bc88341847ecbbd8b20a3a0ff69715b668482
- MD5 5d73ca9fb983f8393d6a66996b60d71c
- SHA1 ef93b8283258bb470ee85f236278544fe8a2d803
- SHA512 40ae06b0fd5c9904aa0b20e9c5f3f48bb79762ea6cfa67fb88bd3e5e517fa89745e110c4c25392e07424f2721742bcfd2878869ba294b39077c4e230ffb3e43d
- SSDEEP 196608:WpRFoTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:IsTO0b7EdxO7Edx
- TLSH T15F962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory