General
- Target 2026-08-08_544acdd94d4cd2ef465e536b737c2dbc_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 6.4MB
- Sample260808-xlafraxtd1
- SHA256 606e761843ff61151e2c8fd23924e83c239344aa342362188e1a4d3570841024
- MD5 544acdd94d4cd2ef465e536b737c2dbc
- SHA1 9b995530d5a1ed16fefce1f5bf03b901682d3594
- SHA512 6c4cae68eb5f070e3cfd8ffe77d8806ab882d68f46d33f3dfa971066b448e4279d2afc68085a44b14a5c2e3ae5a9642a364ca5ec0559f5e182b6eabc55a6703e
- SSDEEP 98304:WpI+92WFc25AsqYJPNuNuVjW3zVYzMF2+0KJg0CnvwZLBOo06HDNzc4j8ji3CXCr:WpRFRTqBtz2zq2+0KqkOF6jtdsMsCO
- TLSH T10C662262B6D144F6D612973088A26B39EB71BB020F35CBD74361CF696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_544acdd94d4cd2ef465e536b737c2dbc_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_544acdd94d4cd2ef465e536b737c2dbc_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 6.4MB
- SHA256 606e761843ff61151e2c8fd23924e83c239344aa342362188e1a4d3570841024
- MD5 544acdd94d4cd2ef465e536b737c2dbc
- SHA1 9b995530d5a1ed16fefce1f5bf03b901682d3594
- SHA512 6c4cae68eb5f070e3cfd8ffe77d8806ab882d68f46d33f3dfa971066b448e4279d2afc68085a44b14a5c2e3ae5a9642a364ca5ec0559f5e182b6eabc55a6703e
- SSDEEP 98304:WpI+92WFc25AsqYJPNuNuVjW3zVYzMF2+0KJg0CnvwZLBOo06HDNzc4j8ji3CXCr:WpRFRTqBtz2zq2+0KqkOF6jtdsMsCO
- TLSH T10C662262B6D144F6D612973088A26B39EB71BB020F35CBD74361CF696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory