General
- Target 2026-07-24_56686a537c7e6a22363e51091c1bf0e2_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- Sample260724-le15cabm9v
- SHA256 401a9c0692417eca74c51316a63cd9482d39cc8372d3e43cf073d2bffb08e5c7
- MD5 56686a537c7e6a22363e51091c1bf0e2
- SHA1 530197728c06945b789c4d073e99e4a830ba8861
- SHA512 354ec66d7aa30f6d54bdfc21d18d7791d735dd80240274ed6a87c0d126ef6c40a8be9fcaba375946bb8e9a6ddc2d2f798bfe57a794f2ad94e8842f9f5a0bfced
- SSDEEP 196608:WpRFQTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:IUTO0b7EdxO7Edx
- TLSH T1EA962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-24_56686a537c7e6a22363e51091c1bf0e2_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_56686a537c7e6a22363e51091c1bf0e2_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- SHA256 401a9c0692417eca74c51316a63cd9482d39cc8372d3e43cf073d2bffb08e5c7
- MD5 56686a537c7e6a22363e51091c1bf0e2
- SHA1 530197728c06945b789c4d073e99e4a830ba8861
- SHA512 354ec66d7aa30f6d54bdfc21d18d7791d735dd80240274ed6a87c0d126ef6c40a8be9fcaba375946bb8e9a6ddc2d2f798bfe57a794f2ad94e8842f9f5a0bfced
- SSDEEP 196608:WpRFQTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:IUTO0b7EdxO7Edx
- TLSH T1EA962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory