General
- Target 2026-08-02_c6b815d4a71ec452020fccec11ecb82f_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- Sample260802-c4vjesbr5s
- SHA256 2960679010daf603297976143de89edb49b4c68a7413bc569b2c49d58331ffe4
- MD5 c6b815d4a71ec452020fccec11ecb82f
- SHA1 952937e11f2a3c486e6d9bbec8b0155e7f92f23a
- SHA512 1428b427298c632aac3a5e66940cc6e193be20f7ad39cb460213c29ac840932370a08876b1eb6af509cc376bd6217d3b10f2fb431bc48fb2649cc1281ba490fd
- SSDEEP 196608:WpRFcTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:IATO0b7EdxO7Edx
- TLSH T197962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-02_c6b815d4a71ec452020fccec11ecb82f_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_c6b815d4a71ec452020fccec11ecb82f_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- SHA256 2960679010daf603297976143de89edb49b4c68a7413bc569b2c49d58331ffe4
- MD5 c6b815d4a71ec452020fccec11ecb82f
- SHA1 952937e11f2a3c486e6d9bbec8b0155e7f92f23a
- SHA512 1428b427298c632aac3a5e66940cc6e193be20f7ad39cb460213c29ac840932370a08876b1eb6af509cc376bd6217d3b10f2fb431bc48fb2649cc1281ba490fd
- SSDEEP 196608:WpRFcTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:IATO0b7EdxO7Edx
- TLSH T197962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory