General
- Target 2026-07-24_c3dd6b6a3629e571cfed815a8098275d_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- Sample260724-ktthdaar7v
- SHA256 33cd23be8709b95a169135ce534e34221c3129a45758fd828ec3eed7949fb07b
- MD5 c3dd6b6a3629e571cfed815a8098275d
- SHA1 6de233ee581e6582e6493eaa6a658f0b3c9d67a1
- SHA512 45e4b8fb48bd71768692e1fc4136cc8ae62b492bb0194f6be92778ebbb113c54fcf64c7c121e25b273e604b4d454a5af946ba941dcd1ed8d915c469d9462b990
- SSDEEP 196608:WpRFmTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:IyTO0b7EdxO7Edx
- TLSH T1F2962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-24_c3dd6b6a3629e571cfed815a8098275d_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_c3dd6b6a3629e571cfed815a8098275d_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- SHA256 33cd23be8709b95a169135ce534e34221c3129a45758fd828ec3eed7949fb07b
- MD5 c3dd6b6a3629e571cfed815a8098275d
- SHA1 6de233ee581e6582e6493eaa6a658f0b3c9d67a1
- SHA512 45e4b8fb48bd71768692e1fc4136cc8ae62b492bb0194f6be92778ebbb113c54fcf64c7c121e25b273e604b4d454a5af946ba941dcd1ed8d915c469d9462b990
- SSDEEP 196608:WpRFmTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:IyTO0b7EdxO7Edx
- TLSH T1F2962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detects executables packed with VMProtect.
Drops file in Drivers directory
Executes dropped EXE
Drops file in System32 directory