General
- Target 2026-08-09_49df58d76775d8402b7fb48a6904e7f3_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 6.9MB
- Sample260809-kb4wdscj3s
- SHA256 4bc23f615d4c5af67d4734171b43a1275d122791ec8e9977bbcd6119a78f0c42
- MD5 49df58d76775d8402b7fb48a6904e7f3
- SHA1 12fbc586ea8b975af6547420c3f6e22d9e4178e2
- SHA512 245481139184fbbd73bb010323013bc3b0e9f069a869e4996d11844a0b43ee6e9bb7d59dceebf0e65a1644457bf337c21e82dbbcaababdc024be70da4c7d177f
- SSDEEP 196608:WpRFuTqBtz2zq2+0KqkOF6jtdsMsCOkO:IqTO0b7EdxO
- TLSH T12B762362B6D144F6D612973088A26B39FB71BB020F35CBD74361CE696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_49df58d76775d8402b7fb48a6904e7f3_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_49df58d76775d8402b7fb48a6904e7f3_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 6.9MB
- SHA256 4bc23f615d4c5af67d4734171b43a1275d122791ec8e9977bbcd6119a78f0c42
- MD5 49df58d76775d8402b7fb48a6904e7f3
- SHA1 12fbc586ea8b975af6547420c3f6e22d9e4178e2
- SHA512 245481139184fbbd73bb010323013bc3b0e9f069a869e4996d11844a0b43ee6e9bb7d59dceebf0e65a1644457bf337c21e82dbbcaababdc024be70da4c7d177f
- SSDEEP 196608:WpRFuTqBtz2zq2+0KqkOF6jtdsMsCOkO:IqTO0b7EdxO
- TLSH T12B762362B6D144F6D612973088A26B39FB71BB020F35CBD74361CE696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory