General
- Target 2026-08-07_3b4e80f7a9398cbfb3c00b0d54fe589b_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.2MB
- Sample260807-gr329agr31
- SHA256 74f1b81cbf80d5a1c790b0d9d3fde89bd12411b4ea172d62034ec9e5c5761254
- MD5 3b4e80f7a9398cbfb3c00b0d54fe589b
- SHA1 934a16a51af4f6701240b3d66284f283c12f62c8
- SHA512 fbf68b3b83cdf22a742f79b294593f9cdaeae2f6e4367c3e92585aa1b0be08f532aeeb96551f48e0b773bdf6a1203fb3a5d662958ffdfa4f9ef8edf05d15574a
- SSDEEP 196608:WpRFrTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsM:IHTO0b7EdxO7Ed
- TLSH T123862362B69140F6D612973088A26B39FB71BB420F31CBD74361CF696D33690EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-07_3b4e80f7a9398cbfb3c00b0d54fe589b_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_3b4e80f7a9398cbfb3c00b0d54fe589b_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.2MB
- SHA256 74f1b81cbf80d5a1c790b0d9d3fde89bd12411b4ea172d62034ec9e5c5761254
- MD5 3b4e80f7a9398cbfb3c00b0d54fe589b
- SHA1 934a16a51af4f6701240b3d66284f283c12f62c8
- SHA512 fbf68b3b83cdf22a742f79b294593f9cdaeae2f6e4367c3e92585aa1b0be08f532aeeb96551f48e0b773bdf6a1203fb3a5d662958ffdfa4f9ef8edf05d15574a
- SSDEEP 196608:WpRFrTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsM:IHTO0b7EdxO7Ed
- TLSH T123862362B69140F6D612973088A26B39FB71BB420F31CBD74361CF696D33690EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory