General
- Target 2026-08-07_d5a49d2294cc97889415c7355a22eafb_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.0MB
- Sample260807-ggab7aeb87
- SHA256 85a222f452ec752d5ac456bd577d0aed52160e52fec178f7a9bbc8ef5283d55a
- MD5 d5a49d2294cc97889415c7355a22eafb
- SHA1 912e4738636e5a78d5c230d83d6937e0e3faa218
- SHA512 adb8b94858f019e482b8a5fbb17892fcf1008373dbad5614572711c80f2e6f816190d84bf1516577abbadf307390d79e6d1ae66296d8b9db559b292e071187d9
- SSDEEP 196608:WpRF9TqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtds:IpTO0b7EdxO7Ed
- TLSH T111862362B69140F6D612973088A26B39FB71BB420F31CBD74361CF696D33690EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-07_d5a49d2294cc97889415c7355a22eafb_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_d5a49d2294cc97889415c7355a22eafb_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.0MB
- SHA256 85a222f452ec752d5ac456bd577d0aed52160e52fec178f7a9bbc8ef5283d55a
- MD5 d5a49d2294cc97889415c7355a22eafb
- SHA1 912e4738636e5a78d5c230d83d6937e0e3faa218
- SHA512 adb8b94858f019e482b8a5fbb17892fcf1008373dbad5614572711c80f2e6f816190d84bf1516577abbadf307390d79e6d1ae66296d8b9db559b292e071187d9
- SSDEEP 196608:WpRF9TqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtds:IpTO0b7EdxO7Ed
- TLSH T111862362B69140F6D612973088A26B39FB71BB420F31CBD74361CF696D33690EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory