General
- Target 2026-08-02_ee81880b9caf24907c8ea3da3d004e60_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- Sample260802-cvrfea1ydv
- SHA256 7186f73c7a2048f35c552889565e48f17711cba2654074f365e6ec3cb3a33aec
- MD5 ee81880b9caf24907c8ea3da3d004e60
- SHA1 34d6991b4ac7a267dc44f73c88dbb74476390259
- SHA512 45e54b1b9255dbc775844756ac9e4802344ded4f15acc0a48bdc909164a507156ffdb2c2f5fc3b8067618eecf91299d8272d8dc0fb2d47ba8d260adc1b8187b7
- SSDEEP 196608:WpRFKTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:I+TO0b7EdxO7Edx
- TLSH T1DA962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-02_ee81880b9caf24907c8ea3da3d004e60_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_ee81880b9caf24907c8ea3da3d004e60_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- SHA256 7186f73c7a2048f35c552889565e48f17711cba2654074f365e6ec3cb3a33aec
- MD5 ee81880b9caf24907c8ea3da3d004e60
- SHA1 34d6991b4ac7a267dc44f73c88dbb74476390259
- SHA512 45e54b1b9255dbc775844756ac9e4802344ded4f15acc0a48bdc909164a507156ffdb2c2f5fc3b8067618eecf91299d8272d8dc0fb2d47ba8d260adc1b8187b7
- SSDEEP 196608:WpRFKTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:I+TO0b7EdxO7Edx
- TLSH T1DA962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory