General
- Target 2026-08-07_56b3c76849bf407e8792e4265b14f5a2_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- Sample260807-gp8vqagq71
- SHA256 78fdfacf4d41d7f5e320f7cc450ca29c46f1368515ec9d89af23a2bca6bfe9cc
- MD5 56b3c76849bf407e8792e4265b14f5a2
- SHA1 6a476cc73e49e3d3624aa4a82f76da5811eabeed
- SHA512 71e406c1c951599c818136dc08733eda08f7ea870881f37722d0a99b7f2ecd89b4d2c80e44794099a7accf41df7e6f3469472f54440dc27f15e9133c2a54a9f8
- SSDEEP 196608:WpRFlTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:IZTO0b7EdxO7Edx
- TLSH T1B3962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-07_56b3c76849bf407e8792e4265b14f5a2_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_56b3c76849bf407e8792e4265b14f5a2_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- SHA256 78fdfacf4d41d7f5e320f7cc450ca29c46f1368515ec9d89af23a2bca6bfe9cc
- MD5 56b3c76849bf407e8792e4265b14f5a2
- SHA1 6a476cc73e49e3d3624aa4a82f76da5811eabeed
- SHA512 71e406c1c951599c818136dc08733eda08f7ea870881f37722d0a99b7f2ecd89b4d2c80e44794099a7accf41df7e6f3469472f54440dc27f15e9133c2a54a9f8
- SSDEEP 196608:WpRFlTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:IZTO0b7EdxO7Edx
- TLSH T1B3962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory