General
- Target 2026-08-07_3b4fdbd7d4b44bb03662cdce84cf8858_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.2MB
- Sample260808-bx1lesfm6s
- SHA256 c281e15c7bb577090a2b3c582150424611969dc15f940d78afbde83b40c53c47
- MD5 3b4fdbd7d4b44bb03662cdce84cf8858
- SHA1 55df5464e83c2917c44ff3ca6c1277f27e7f1ad3
- SHA512 a4563cdf9681b2ba33ac697d3cd20aef64b00b61e705eaec7e48907879e3fb039bfe84cf70e80ee980011368d3229f215bdb0ab67cc57182e5af93bc12b141be
- SSDEEP 196608:WpRFmTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsM:IiTO0b7EdxO7Ed
- TLSH T139862362B69140F6D612973088A26B39FB71BB420F31CBD74361CF696D33690EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-07_3b4fdbd7d4b44bb03662cdce84cf8858_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_3b4fdbd7d4b44bb03662cdce84cf8858_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.2MB
- SHA256 c281e15c7bb577090a2b3c582150424611969dc15f940d78afbde83b40c53c47
- MD5 3b4fdbd7d4b44bb03662cdce84cf8858
- SHA1 55df5464e83c2917c44ff3ca6c1277f27e7f1ad3
- SHA512 a4563cdf9681b2ba33ac697d3cd20aef64b00b61e705eaec7e48907879e3fb039bfe84cf70e80ee980011368d3229f215bdb0ab67cc57182e5af93bc12b141be
- SSDEEP 196608:WpRFmTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsM:IiTO0b7EdxO7Ed
- TLSH T139862362B69140F6D612973088A26B39FB71BB420F31CBD74361CF696D33690EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory