General
- Target 2026-08-16_b3889aa1d7c44ec13a2d2cfe65082912_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- Sample260816-ee36dacn9x
- SHA256 1fbe8228d39a5bb98ba824768b7f79f4ce893052c42b99e774e4261183727ad4
- MD5 b3889aa1d7c44ec13a2d2cfe65082912
- SHA1 366cc9a46e493179e77024e26dfabcac888cfd03
- SHA512 54fa7ef84fb386164b724e88777c0fd9ca9ca97df814ee378a57348ca06d08a18febd4e3ffeaaae1ed5a89baf8cfdaa84e8d79f1da47f3747e7aa19dfdd7ecd8
- SSDEEP 196608:WpRFTTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:I3TO0b7EdxO7Edx
- TLSH T106962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-16_b3889aa1d7c44ec13a2d2cfe65082912_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_b3889aa1d7c44ec13a2d2cfe65082912_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.6MB
- SHA256 1fbe8228d39a5bb98ba824768b7f79f4ce893052c42b99e774e4261183727ad4
- MD5 b3889aa1d7c44ec13a2d2cfe65082912
- SHA1 366cc9a46e493179e77024e26dfabcac888cfd03
- SHA512 54fa7ef84fb386164b724e88777c0fd9ca9ca97df814ee378a57348ca06d08a18febd4e3ffeaaae1ed5a89baf8cfdaa84e8d79f1da47f3747e7aa19dfdd7ecd8
- SSDEEP 196608:WpRFTTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsMsC:I3TO0b7EdxO7Edx
- TLSH T106962362B69180F6D612973088925B39FB71BB420F31CBD74361CE69AD33690EF37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory