General
- Target 2026-07-20_3e53cf0e1c1216a5c8c2c82891913ea6_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 6.4MB
- Sample260720-ds3w4agt9v
- SHA256 1f58d95d01f56c73ab106b6c1081c5d4a6aff6187347c85787984a485a73ecca
- MD5 3e53cf0e1c1216a5c8c2c82891913ea6
- SHA1 fddd47fe6fb526501f1cab9e4589d5343b601afb
- SHA512 a1fe55de1db7d2eb20ab8ab5b47776ab0a9474458064296ad4dde558c3a9608c1143df860851e66538d732681706e19aaf42a6b2c19a19e10134c9a080ec97c5
- SSDEEP 98304:WpI+92WFc20AsqYJPNuNuVjW3zVYzMF2+0KJg0CnvwZLBOo06HDNzc4j8ji3CXCr:WpRFcTqBtz2zq2+0KqkOF6jtdsMsCO
- TLSH T117662262B6D144F6D612973088A26B39EB71BB020F35CBD74361CF696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-20_3e53cf0e1c1216a5c8c2c82891913ea6_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_3e53cf0e1c1216a5c8c2c82891913ea6_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 6.4MB
- SHA256 1f58d95d01f56c73ab106b6c1081c5d4a6aff6187347c85787984a485a73ecca
- MD5 3e53cf0e1c1216a5c8c2c82891913ea6
- SHA1 fddd47fe6fb526501f1cab9e4589d5343b601afb
- SHA512 a1fe55de1db7d2eb20ab8ab5b47776ab0a9474458064296ad4dde558c3a9608c1143df860851e66538d732681706e19aaf42a6b2c19a19e10134c9a080ec97c5
- SSDEEP 98304:WpI+92WFc20AsqYJPNuNuVjW3zVYzMF2+0KJg0CnvwZLBOo06HDNzc4j8ji3CXCr:WpRFcTqBtz2zq2+0KqkOF6jtdsMsCO
- TLSH T117662262B6D144F6D612973088A26B39EB71BB020F35CBD74361CF696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detects executables packed with VMProtect.
Drops file in Drivers directory
Executes dropped EXE
Drops file in System32 directory