General
- Target 2026-07-20_ed1f6538dee201f2909f15b6e3a4fc7e_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 7.0MB
- Sample260720-cwxc2sfs3w
- SHA256 bb790ff568abda1bd642ea36a4f04502bcecf8763c8fdf1616a6aa9f0bea1d57
- MD5 ed1f6538dee201f2909f15b6e3a4fc7e
- SHA1 3f317a0273187c79ab018b737914492428b0df56
- SHA512 0c4bf73110d9b06280fe65acd45d82b4649008528bba28882a639f71ef019fc461b223f71c45838243a0b5b14fee1791d5850090c9a7b3bd80a4ae1d89b2e893
- SSDEEP 196608:WpRFbTqBtz2zq2+0KqkOF6jtdsMsCOkO:IfTO0b7EdxO
- TLSH T129762362B6D144F6D612973088A26B39FB71BB020F35CBD74361CE696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-20_ed1f6538dee201f2909f15b6e3a4fc7e_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_ed1f6538dee201f2909f15b6e3a4fc7e_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 7.0MB
- SHA256 bb790ff568abda1bd642ea36a4f04502bcecf8763c8fdf1616a6aa9f0bea1d57
- MD5 ed1f6538dee201f2909f15b6e3a4fc7e
- SHA1 3f317a0273187c79ab018b737914492428b0df56
- SHA512 0c4bf73110d9b06280fe65acd45d82b4649008528bba28882a639f71ef019fc461b223f71c45838243a0b5b14fee1791d5850090c9a7b3bd80a4ae1d89b2e893
- SSDEEP 196608:WpRFbTqBtz2zq2+0KqkOF6jtdsMsCOkO:IfTO0b7EdxO
- TLSH T129762362B6D144F6D612973088A26B39FB71BB020F35CBD74361CE696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory