General
- Target 2026-08-08_c09005e7e2fe3069a7e535737806aa7d_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.3MB
- Sample260808-xec83afa87
- SHA256 79ab9b78092c67cf0db90c09bdf26b5d57ab756f97b236283e5d778be1b17064
- MD5 c09005e7e2fe3069a7e535737806aa7d
- SHA1 6e7c2b5a3c7e3e3c797baee1355269eb795adfe2
- SHA512 5a8b103bcf01685eff55020dadf5d9b90a8bd4a8a8a98ace5eff5a24d49d6ff8e401f3de4a4af5242669e06e2ec9bc1191db4afb7974144342ab111ccc8b3c5c
- SSDEEP 196608:WpRFDTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMs:InTO0b7EdxO7Ed
- TLSH T176962362B69140F6D612973088A26B39FB71BB420F31CBD74361CF696D33690EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_c09005e7e2fe3069a7e535737806aa7d_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_c09005e7e2fe3069a7e535737806aa7d_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.3MB
- SHA256 79ab9b78092c67cf0db90c09bdf26b5d57ab756f97b236283e5d778be1b17064
- MD5 c09005e7e2fe3069a7e535737806aa7d
- SHA1 6e7c2b5a3c7e3e3c797baee1355269eb795adfe2
- SHA512 5a8b103bcf01685eff55020dadf5d9b90a8bd4a8a8a98ace5eff5a24d49d6ff8e401f3de4a4af5242669e06e2ec9bc1191db4afb7974144342ab111ccc8b3c5c
- SSDEEP 196608:WpRFDTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMs:InTO0b7EdxO7Ed
- TLSH T176962362B69140F6D612973088A26B39FB71BB420F31CBD74361CF696D33690EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory