General
- Target 2026-08-04_7500d4843bbab611e5d2c999dcb973ec_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.2MB
- Sample260804-hkdpfshp2w
- SHA256 e35b25cd2b27dfa9f8da32df98bca5c6941f71fbe6f592e9f6cfc01c856bc98e
- MD5 7500d4843bbab611e5d2c999dcb973ec
- SHA1 6c17d7010ba1254f8b987a2dc2753fa7aa36b690
- SHA512 e36689969e73dfd979994d78f5d6d132fb6888ae934262671e3e33fd9667c71289c87ccef61346c25c67828d83c496a005df038a18c6a76485d6fea4091051ac
- SSDEEP 196608:WpRF3TqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsM:IrTO0b7EdxO7Ed
- TLSH T190862362B69140F6D612973088A26B39FB71BB420F31CBD74361CF696D33690EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_7500d4843bbab611e5d2c999dcb973ec_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_7500d4843bbab611e5d2c999dcb973ec_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.2MB
- SHA256 e35b25cd2b27dfa9f8da32df98bca5c6941f71fbe6f592e9f6cfc01c856bc98e
- MD5 7500d4843bbab611e5d2c999dcb973ec
- SHA1 6c17d7010ba1254f8b987a2dc2753fa7aa36b690
- SHA512 e36689969e73dfd979994d78f5d6d132fb6888ae934262671e3e33fd9667c71289c87ccef61346c25c67828d83c496a005df038a18c6a76485d6fea4091051ac
- SSDEEP 196608:WpRF3TqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsM:IrTO0b7EdxO7Ed
- TLSH T190862362B69140F6D612973088A26B39FB71BB420F31CBD74361CF696D33690EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory