General
- Target 2026-08-08_2fdf0de9a53dbc54c1d5b8899664d109_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- Sample260808-fp1cxatyes
- SHA256 ef0e74dc46ed08456f3d1599e3f20eb96d549b0959dcc5b34b6417c71a07ea2a
- MD5 2fdf0de9a53dbc54c1d5b8899664d109
- SHA1 1f61f56975fe4575c2cc0f1283c42fcb0fe6d092
- SHA512 7d58b21143059025ca1413e908fc017203a08386c3c4b111b2386aa4ff4becedbd322e1b5c31c1309793cbbdac453dcc8039ca2d53e16046e2e93b17c9d98f56
- SSDEEP 196608:WpRF9TqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:IBTO0b7EdxO7Edx
- TLSH T111962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_2fdf0de9a53dbc54c1d5b8899664d109_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_2fdf0de9a53dbc54c1d5b8899664d109_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- SHA256 ef0e74dc46ed08456f3d1599e3f20eb96d549b0959dcc5b34b6417c71a07ea2a
- MD5 2fdf0de9a53dbc54c1d5b8899664d109
- SHA1 1f61f56975fe4575c2cc0f1283c42fcb0fe6d092
- SHA512 7d58b21143059025ca1413e908fc017203a08386c3c4b111b2386aa4ff4becedbd322e1b5c31c1309793cbbdac453dcc8039ca2d53e16046e2e93b17c9d98f56
- SSDEEP 196608:WpRF9TqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:IBTO0b7EdxO7Edx
- TLSH T111962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory