General
- Target 2026-07-24_e0ddbe9f9cf297a1ab7e3c13c1cf1a52_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- Sample260724-kqlncsar21
- SHA256 7940932aa2332e45d92e802578a9a7f108ab2b0f8b14ebed69f2df6a96f14da6
- MD5 e0ddbe9f9cf297a1ab7e3c13c1cf1a52
- SHA1 d23704d052760c08099b8c725bd624f420ec113f
- SHA512 32c96a79c5ffbd3717096f7acd863ba9761768d28c05a8da86216716978aa4dc9c7b37fbef123e4f93e025f13253d7c511cfae715425e52cfcc84a26ed96a2d4
- SSDEEP 196608:WpRFxTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:INTO0b7EdxO7Edx
- TLSH T162962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-24_e0ddbe9f9cf297a1ab7e3c13c1cf1a52_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_e0ddbe9f9cf297a1ab7e3c13c1cf1a52_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- SHA256 7940932aa2332e45d92e802578a9a7f108ab2b0f8b14ebed69f2df6a96f14da6
- MD5 e0ddbe9f9cf297a1ab7e3c13c1cf1a52
- SHA1 d23704d052760c08099b8c725bd624f420ec113f
- SHA512 32c96a79c5ffbd3717096f7acd863ba9761768d28c05a8da86216716978aa4dc9c7b37fbef123e4f93e025f13253d7c511cfae715425e52cfcc84a26ed96a2d4
- SSDEEP 196608:WpRFxTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:INTO0b7EdxO7Edx
- TLSH T162962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory