General
- Target 2026-08-09_e9bc8e39d780b346b7c406c7e5b8fcc3_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 6.4MB
- Sample260809-1jrh2awdpc
- SHA256 ea362dcb27523cd6bf9fe5319636d9d592b0f3c0940e0cbd865f9ae775f8b8da
- MD5 e9bc8e39d780b346b7c406c7e5b8fcc3
- SHA1 bbb4a968426af03fb98f2db0e0bfbe5a0831d8b5
- SHA512 684a2135d113a5d70ae34863bb886c44538a81d6cadd9d574e614026f75fe325b4cbf201cf2598c1dcaa238eed1dc64d8b241e30088b92ecd738c91f91c4ddf0
- SSDEEP 98304:WpI+92WFc2cAsqYJPNuNuVjW3zVYzMF2+0KJg0CnvwZLBOo06HDNzc4j8ji3CXCr:WpRFETqBtz2zq2+0KqkOF6jtdsMsCO
- TLSH T1EE662262B6D144F6D612973088A26B39EB71BB020F35CBD74361CF696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_e9bc8e39d780b346b7c406c7e5b8fcc3_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_e9bc8e39d780b346b7c406c7e5b8fcc3_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 6.4MB
- SHA256 ea362dcb27523cd6bf9fe5319636d9d592b0f3c0940e0cbd865f9ae775f8b8da
- MD5 e9bc8e39d780b346b7c406c7e5b8fcc3
- SHA1 bbb4a968426af03fb98f2db0e0bfbe5a0831d8b5
- SHA512 684a2135d113a5d70ae34863bb886c44538a81d6cadd9d574e614026f75fe325b4cbf201cf2598c1dcaa238eed1dc64d8b241e30088b92ecd738c91f91c4ddf0
- SSDEEP 98304:WpI+92WFc2cAsqYJPNuNuVjW3zVYzMF2+0KJg0CnvwZLBOo06HDNzc4j8ji3CXCr:WpRFETqBtz2zq2+0KqkOF6jtdsMsCO
- TLSH T1EE662262B6D144F6D612973088A26B39EB71BB020F35CBD74361CF696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory